{"id":52715,"date":"2022-11-23T12:35:20","date_gmt":"2022-11-23T04:35:20","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=52715"},"modified":"2022-11-23T12:35:22","modified_gmt":"2022-11-23T04:35:22","slug":"top-5-schemes-cybercriminals-are-running-amid-the-biggest-sport-event","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2022\/11\/23\/top-5-schemes-cybercriminals-are-running-amid-the-biggest-sport-event\/","title":{"rendered":"Top 5 schemes cybercriminals are running amid the biggest sport event"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>The FIFA World Cup Qatar 2022&#x2122; is the most awaited sports event of 2022 for football fans and kicks off on November 20. As well as exciting hundreds of millions of fans worldwide, it\u2019s also attracted the interest of cybercriminals looking to make a fast buck.\u00a0\u00a0<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To get a better overview of how scammers are trying to monetize football fans\u2019 interest, Kaspersky experts have analyzed World Cup-related phishing websites from around the globe designed to steal users\u2019 identifying and banking data. Kaspersky researchers have found fake pages offering everything from tickets or event merch, to match streaming services, plus numerous giveaways and NFT scams exploiting the World Cup.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ticketing scams<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As with all major global sports events, fake tickets are the spread bait most used to lure victims and this World Cup is no exception. Additionally, Qatar 2022 is only offering digital tickets, increasing the risk of running into malicious resources. Kaspersky experts discovered numerous phishing pages offering to buy tickets for FIFA matches. Needless to say, users will lose personal data, banking details, and money. Additionally, scammers may start also using the stolen data for other purposes or sell it on the Dark Web.&nbsp;&nbsp;&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/ecp.yusercontent.com\/mail?url=https%3A%2F%2Flh5.googleusercontent.com%2FIIhiNDQlFoE8qJCC8l8uGTgnmcqKl9pz5FrA4tV2pghiubLfvCR6liJDjjfFi0zJr_K2orgIDbIS1eBYHq9ZdfLEIebM4aXTGfuXDKGMhFF3mC2pz9DjWwyGKT5tAece652tTelQDcKK_4tOxcW4wFudt5YCLoij0L3khs1e-9K7SAk17MPPxbpzhufaLQ&amp;t=1669177853&amp;ymreqid=27f3344f-c727-c29c-1c8a-40004d01a200&amp;sig=dDmeJXkma7gsvCD.u7hIdw--~D\" alt=\"\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">An example of a phishing page<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Gifts<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">No big public event is complete without fraudsters imitating extremely generous giveaways. Kaspersky experts also found phishing pages offering to win two tickets to the World Cup. This is quite popular where usually each user becomes a \u2018lucky\u2019 winner; with the chosen ones only needing to pay a delivery fee.\u00a0<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Merchandise&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Another way to steal users\u2019 data is via fake FIFA-related merchandise stores. While the offer of a T-shirt of your favorite team, phone cases with popular players, or signed soccer balls sounds good, after entering your data and transferring money to make a purchase, fans lose their cash to fraudsters instead.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Crypto and NFT frauds<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A distinctive feature of the threat landscape on the eve of the 2022 World Cup has been the active spread of various crypto scams, mostly exploiting the popularity of NFTs. Some offer to make a bet on a match and win cryptocurrency, others to win worldwide related NFT art. All the user needs to do is to enter crypto wallet credentials, so the \u2018prize\u2019 transfers directly. In such scenario, scammers gain access to all savings and related wallet data.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/ecp.yusercontent.com\/mail?url=https%3A%2F%2Flh3.googleusercontent.com%2FVYpAZRznRXFZNBX0-wGd9ezuNmJ-I6VMAyHBmbprxZlfy2Y4rajiVUZMkTeU-8B6H4Ofb0QUudAhERaZ3p6gwFzpv0DRjP1pLXPX_3YksYYYEkOWDbflhD5PT0QWlXQ4YlrirXe4byNd1841uGpqthaAUquKcFAiiW6AzSUyWjI0Ri75k5euFG7EM0vGRA&amp;t=1669177853&amp;ymreqid=27f3344f-c727-c29c-1c8a-40004d01a200&amp;sig=H.ST0pNcqL7t_GHj0fxEtw--~D\" alt=\"\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">An example of the World Cup related crypto scam<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Another scheme is crypto investment fraud is a bright example of a dubious investment. Fraudsters actively create real coins and convince a user to invest in it while promising the victim potential currency growth. In real life, such initiatives are almost never a success as users have spent money on something that will never develop.&nbsp;<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/ecp.yusercontent.com\/mail?url=https%3A%2F%2Flh6.googleusercontent.com%2FmERBVfAQstqwBNuucU0d3yiPOEOfGpnAHd9Ndm76W_hGu_MBlILonn6tuFZ2zpq2wFg11-Z_dQiG-aKHFCt-guy_xdqzL2t0MZpGu9xITYz4l_gLB-Y-aTBtRWkG5M9CaHDJOHs-DCAgqBg0m9NffsUCfx5swmQV0R3s7AxktXsNAy9QijGwzFdZ_5OYgg&amp;t=1669177853&amp;ymreqid=27f3344f-c727-c29c-1c8a-40004d01a200&amp;sig=WcqwLhb3Wc30NQ7SY1ehuA--~D\" alt=\"\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">An example of the World Cup related NFT scam<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Flights and accommodations&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Pandemic imposed limitations will also see the 2022 World Cup stage many offline events with live viewers, involving thousands of tourists in Qatar &#8211; something scammers have not missed. Kaspersky experts have observed numerous phishing pages imitating airline services offering tickets to Doha. The analyzed web page shows all the classic signs of scam \u2013 nice appearance, wrong spelling, freshly registered domain, and limited functionality of the site. Although the site mimics a global airfare aggregator, the user can only choose Qatar in the list of destination countries. Once flight details are entered, the victim is offered the chance to enter personal data along with ID and credit information.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/ecp.yusercontent.com\/mail?url=https%3A%2F%2Flh4.googleusercontent.com%2FpYZ73PWqQ91yEV6S4Qv1bwGoee3z1K7nTsYtvGS6P-mqUz9dCxp99vP8qv33CS1xDeT7fbgdwUNvZLgzVHBUEhM2U3nRv3caKacd_NyCXCwaDoAGAJEI6tsr-zQrstHzZt4vhuQD-HH-vlXY5YO_sxZKA3lubWxvKrGDlXZYkmW8c4N5HCPsejnCQViYqA&amp;t=1669177853&amp;ymreqid=27f3344f-c727-c29c-1c8a-40004d01a200&amp;sig=bzDitLllN3FU3pE8HxvV6Q--~D\" alt=\"\"\/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">An example of a phishing page offering to buy a plane ticket<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em><br><\/em>\u201cMajor sport events always attract the attention of cybercriminals. With this World Cup, scammers got very creative, as we have observed a variety of fraudulent schemes employed. We see how they are trying to benefit most from the situation and exploit as many trendy topics as possible, including a growing number of NFT scams related to the World Cup. At the same time, there are many so-called traditional scams out there from giveaways and fake tickets to merch stores. These schemes are simple, yet, effective and is why such fraudulent pages are eternal companions of big events. We encourage users to be attentive when they receive offers that seem too good to be true and carefully check the validity of the messages they receive,\u201d comments Olga Svistunova, a security expert at Kaspersky.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To avoid falling victim to a scam, Kaspersky advises users to:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>It will be safe to check the link before clicking. Hover over it to preview the URL, and look for misspellings or other irregularities&nbsp; Check the sender\u2019s address. Most\u202fspam\u202fcomes from email addresses that don\u2019t make sense or appear as gibberish \u2013 for example, amazondeals@tX94002222aitx2.com or similar. By hovering over the sender&#8217;s name, which itself may be spelled oddly, you can see the full email address. If you\u2019re not sure if an email address is legitimate or not, you can put it into a search engine to check.\u202f&nbsp;<\/li>\n\n\n\n<li>It\u2019s better not to follow links from emails at all. Instead, you can open a new tab or window and enter the URL of your bank or other destination manually.<\/li>\n\n\n\n<li>Consider what kind of information is being requested.\u202fLegitimate companies don\u2019t contact you out of the blue via unsolicited emails to ask you for personal information such as banking or credit card details, social security number etc. In general, unsolicited messages telling you to &#8216;verify account details&#8217; or &#8216;update your account information should be treated with caution.\u202f&nbsp;<\/li>\n\n\n\n<li>Use a reliable security solution, such as<a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/www.kaspersky.com\/security-cloud\"> <\/a><a rel=\"noreferrer noopener\" target=\"_blank\" href=\"https:\/\/usa.kaspersky.com\/premium\">Kaspersky<\/a>, that identifies malicious attachments and blocks phishing sites.<\/li>\n\n\n\n<li>Be wary if the message is creating a sense of urgency.\u202fSpammers often try to apply pressure by creating a sense of urgency. For example, the subject line may contain words like \u201curgent\u201d or \u201cimmediate action required\u201d \u2013 to pressure you into acting.\u202f&nbsp;<\/li>\n\n\n\n<li>Grammar and spelling\u202fcheck\u202fis\u202fthe effective way to identify a scammer.\u202fTypos and bad grammar are red flags. So too are odd phrasing or unusual syntax, which might result from the email being translated back and forth through\u202ftranslator\u202fseveral times.\u202f&nbsp;<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>To get a better overview of how scammers are trying to monetize football fans\u2019 interest, Kaspersky experts have analyzed World Cup-related phishing websites from around the globe designed to steal users\u2019 identifying and banking data.<\/p>\n","protected":false},"author":6,"featured_media":52716,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[286,101,54,2103],"class_list":["post-52715","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-headlines","tag-it-security","tag-kaspersky","tag-security","tag-security-breach"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/52715","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=52715"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/52715\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/52716"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=52715"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=52715"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=52715"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}