Cybercriminals are exploiting global sports games to commit financial fraud and theft, Kaspersky warns

With the strong demand for tickets or promotions for sports games that begin this week, cybercriminals are taking advantage of the event’s popularity to carry out scams related to the theme with the aim of stealing money and information. The security company Kaspersky explains in more detail how these scams work and how you can recognize them to protect yourself.

Kaspersky warns that cybercriminals are using high-profile dates to carry out phishing scams. This is a type of online attack where someone tries to trick a victim into providing personal information, such as passwords or credit card numbers, by pretending to be a trustworthy company or person in an email, text message or fake website. Below are some recent examples of fake websites that use this sporting interest to trick victims.

Fake tickets for the games

As already warned by official pages, fake ticket offers are one example of scams created by cybercriminals to steal money from unsuspecting people – this scam has already been reported with the family of a swimmer from the United Kingdom, who lost 2.5 thousand pounds when trying to buy tickets for the games.

The portals offer fake tickets at exclusive prices and claim to have seats for sold-out events. In this scenario, victims fill out a form, sending their personal information (such as name, email and phone number) and money to the scammers. The scheme results in financial losses and the sale of the data on Dark Web forums.

Fake corporate gifts

A giveaway is a promotion in which a person or company offers free products or services to other people. To participate, you usually have to follow a few simple rules, such as signing up on a website, following a social media account, or sharing a post.

Kaspersky experts recently discovered a fraudulent website posing as a French bank, promising a fake chance to win tickets to matches. Employees are tricked into filling out a form with personal data, including login credentials and passwords for their online accounts. This allows cybercriminals to infiltrate victims’ corporate resources and spread malicious content.

Fake product stores

Kaspersky experts also discovered online stores selling merchandise for the 2024 games, such as jerseys, uniforms and accessories. The stores were phishing pages and there were no real products to sell, with victims paying for offers they never received.

Special mobile network plans

Another scheme investigated by Kaspersky researchers is fake websites offering free mobile data packages, offering 48 GB for all networks. These sites trick people into handing over personal information, such as phone numbers and payment details, under the guise of activating a data package. Once submitted, this information is harvested for malicious purposes, leading to potential financial losses and privacy breaches.

“During events with high public impact, the volume of offers can be overwhelming, due to high demand. Scammers prey on people’s excitement and urgency, but it’s crucial to approach every offer with a healthy dose of skepticism. Remember: if something seems too good to be true, it probably is. Take the time to verify the authenticity of offers and protect your personal information. Your vigilance could be the difference between enjoying the event and falling victim to a scam.” states Fabio Assolini, Director of Kaspersky’s Global Research and Analysis Team for Latin America.

To stay safe from scams while gaming, Kaspersky experts recommend:

• Verify authenticity: You should only purchase tickets, merchandise or services from official and reliable sources. Check the event’s official website to see if a sale is authorized.
• Be skeptical of offers: If an offer seems too good to be true, it probably is. Be wary of steep discounts and exclusive offers, especially if they come from unknown sources.
• Protect your data: Avoid sharing personal and financial information on unknown websites. Make sure the website is secure by manually typing it into your browser’s URL.
• Opt for security software: Keep your antivirus and security software up to date to protect yourself against malware and phishing attacks.
• Stay informed: Be aware and stay informed about the most common scam tactics. Follow updates from cybersecurity experts and always opt for official sources.