A threat intelligence briefing from Recorded Future's Insikt Group covering cyber and physical security risks surrounding the 2026 FIFA World Cup. Key threats include violent extremism targeting soft targets like fan zones, widespread cybercriminal exploitation via fraudulent domains and phishing campaigns (over 1,000 suspicious domains already registered), state-sponsored espionage targeting high-value attendees, ransomware risks for sponsors and vendors, and hacktivist operations linked to geopolitical events like the Iran War. The report recommends blended cyber-physical security planning across public safety, fraud, brand protection, and third-party risk functions.
Table of contents
Cybercriminals Already Exploiting World Cup DemandHigh-Value Attendees and Organizations Face Targeted Cyber RisksHacktivists and Influence Networks Look to Score Political PointsKeeping Ahead of the Threats54 Impressions