Threats Tagged 'ticket fraud'

A multi-layered scam targets fans of Celine Dion's French tour by using fake ticket offers on Facebook Groups and Marketplace, exploiting Ticketmaster's transfer feature to resell identical digital tickets multiple times, and deploying fraudulent websites impersonating official ticket distributors via Shopify. The scam uses social engineering to create urgency and leverages a recycled phishing kit previously used in other major concert scams. Victims are defrauded through emotional manipulation and technical deception.

MediumCampaignFrance#france#celine dion concert#shopify abuse

Threat actors are exploiting anticipation for the FIFA World Cup 2026 through sophisticated phishing campaigns targeting fans seeking tickets, hospitality packages, and tournament information. Attackers have deployed FIFA-themed domains and mobile-optimized phishing infrastructure resolving to specific IP addresses, designed to harvest credentials and payment information. The campaigns feature convincing fake ticketing portals that mimic official FIFA services, collecting personal details including names, emails, phone numbers, and payment card data. Some variants redirect victims to online gambling platforms after credential theft. The infrastructure leverages third-party payment services like KOIpay and EBpay, with JavaScript redirecting users to external payment gateways. Victims face risks including fraudulent account creation, credential stuffing attacks, email account takeover, and unauthorized financial access. This operation represents part of a larger fraud ecosystem targeting the tournament.