MEDIUMPhishing
Global

Chinese Phishing Service Scams Thousands of FIFA World Cup Fans

·Source: Bank Info Security

Updated:

Executive Summary

Researchers estimate losses ranging from hundreds of millions to billions A Chinese-language phishing-as-a-service platform scammed between $470 million to $1 billion from soccer fans ahead of the 2026 FIFA World Cup star

Analysis

Researchers estimate losses ranging from hundreds of millions to billions A Chinese-language phishing-as-a-service platform scammed between $470 million to $1 billion from soccer fans ahead of the 2026 FIFA World Cup starting next month. The financially motivated operator Domain-by-domain takedowns will not stop this, warned Group-IB.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/nist-rebrands-ai-consortium-ditches-safety-from-name-image_small-8-a-31815.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on May 30, 2026.

Related Threats

MEDIUMPhishing

MokN Raises $15 Million for Phish-Back Platform

MokN's platform deploys realistic decoy access points to lure attackers into revealing compromised credentials, enabling organizations to respond before abuse occurs. The post MokN Raises $15 Million for Phish-Back Platform appeared first on SecurityWeek .

SecurityWeek
CRITICALPhishing

XCharge C6

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-08.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to gain administrator rights or execute code on the affected device.</strong></p> <p>The following versions of XCharge C6 are affected:</p> <ul> <li>C6</li> </ul

CVE-2026-9037CVE-2026-9038
CISA Advisories
CRITICALPhishing

CP Plus 8 Ch. Network Video Recorder

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-148-05.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of this vulnerability allows an attacker's malicious script to execute in the browser of any authenticated user or administrator who accesses the affected interface. This could lead to compromise of user sessio

CVE-2026-6824
CISA Advisories