Home field disadvantage: Cyber threats to the 2026 FIFA World Cup

The 2026 FIFA World Cup is a once-in-a-generation opportunity, and threat actors have already begun capitalizing on it. The 2026 FIFA World Cup, set to kick off on June 11, has already broken records for the most host nations, the most matches and the highest amount of prize money to date for winning teams.

Arctic Wolf set out to proactively investigate the criminal ecosystem surrounding the tournament. Its observations reveal that malicious infrastructure was already in place and fully operational months before kickoff, that it is overwhelmingly mobile-first, and that it has expanded its scope beyond defrauding fans, to directly targeting the people and organizations running the event.

Since January 2026, Arctic Wolf observed more than 10,000 World Cup themed domains pop up, at a rate of roughly 2000 new domains per month. Not all are malicious, but with generative AI now producing the sites, the content, and even the apps, attack automation has reached a new level.

Read more at Arctic Wolf