KELA

The 2026 FIFA World Cup is the biggest sporting event in history. It's also one of the biggest attack surfaces ever assembled.
16 host cities. 48 teams. 6 billion viewers. And a digital supply chain - ticketing, hospitality, transport, telecom, hundreds of vendors - that attackers have been probing months before the June 11 kickoff.
Here’s what KELA's CIC has identified:
→ 1.5M+ compromised accounts tied to FIFA-related domains
→ 7,300+ leaked credential instances (2,800 in the past year alone)
→ plaintext credentials for FIFA's own identity infrastructure
→ alleged RDP and cloud-console access to FIFA servers, listed on a cybercrime forum
Our expert threat research team has mapped the whole landscape and makes recommendations for your security team to nation-state espionage, industrial-scale fraud, and a dark web already trading the credentials that power attacks.
Get the report → https://hubs.la/Q04k1Xpm0

KELA's Cyber Intelligence Center (CIC) exposes the Infrastructure Destruction Squad, a threat actor blending political hacktivism with profit-driven cybercrime. The group recently launched the BLACKNET-00 ransomware builder for $300, alongside critical infrastructure (ICS/SCADA) exploits and banking malware.
Learn why this low-cost, high-impact arsenal is drastically lowering the barrier to entry for novice cybercriminals and how this hybrid threat model changes the game for enterprise defense.

https://hubs.la/Q04j6DwG0