World Cup Qatar

Indicators of Compromise

APT Groups

Notes

<p style="box-sizing: border-box; margin-bottom: 1.5rem; font-family: &quot; color: rgb(96, 96, 128); font-size: 16px;"><strong style="box-sizing: border-box; letter-spacing: 0px;">FIFA World Cup 2022</strong><span style="box-sizing: border-box;">&nbsp;will be organized in Qatar from November 20 to December 18, 2022. Predictions show that&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">1.5 million people</strong><span style="box-sizing: border-box;">&nbsp;will travel to Qatar to watch the tournament, which national teams from 32 countries will attend. Such large international organizations are becoming more attractive to cyber attackers. People’s and the media’s interest in these organizations, the use of high-tech in such events, the digital activities of all the players, audience, visitors, fans, stakeholders, and people’s lack of awareness of cyber security all pave the way for cyber threat actors.&nbsp;</span></p><p style="box-sizing: border-box; margin-bottom: 1.5rem; font-family: &quot; color: rgb(96, 96, 128); font-size: 16px;"><span style="box-sizing: border-box;">Past experiences show that large-scale sports organizations attract threat actors. Russian authorities announced during&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">FIFA World Cup 2018</strong><span style="box-sizing: border-box;">&nbsp;that they blocked&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">25 million cyber-attacks</strong><span style="box-sizing: border-box;">. At the&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">2018 PyeongChang Winter Olympics</strong><span style="box-sizing: border-box;">, the organization was targeted by&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">12 million cyber-attacks per day</strong><span style="box-sizing: border-box;">, totaling 600 million. Across the&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">2020 Tokyo Olympics and Paralympics</strong><span style="box-sizing: border-box;">, authorities prevented&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">450 million cyber-attacks</strong><span style="box-sizing: border-box;">&nbsp;on the official website and organizing committee systems. The number of attacks on Tokyo was particularly remarkable because the Olympics were played without an audience within the scope of the Covid-19 measures, so attacks like ticket sales fraud and stealing personal information were on the lowest level.</span></p><p style="box-sizing: border-box; margin-bottom: 1.5rem; font-family: &quot; color: rgb(96, 96, 128); font-size: 16px;"><span style="box-sizing: border-box;">In addition to the large attacks that drew public attention, numerous&nbsp;</span><a href="https://socradar.io/how-socradar-can-help-fraud-teams/" style="box-sizing: border-box; color: rgb(255, 84, 98); background-color: transparent; font-weight: 600;"><span style="box-sizing: border-box;"><span style="box-sizing: border-box;">fraud&nbsp;</span><span style="box-sizing: border-box;">and&nbsp;</span><span style="box-sizing: border-box;">scam</span></span></a><span style="box-sizing: border-box;">&nbsp;attacks like&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">phishing emails</strong><span style="box-sizing: border-box;">&nbsp;containing promotional or lottery offers, threat actors used fake FIFA ticket sales websites,&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">fake live streaming</strong><span style="box-sizing: border-box;">&nbsp;or score/match schedule tracking links, and&nbsp;</span><strong style="box-sizing: border-box; letter-spacing: 0px;">malware-embedded mobile applications</strong><span style="box-sizing: border-box;">&nbsp;in the previous FIFA events. Although these attacks, carried out specifically to collect personal data and have financial gain appear small-scale, they have a significant impact as they are both large and aimed at all fans worldwide.</span></p><p style="box-sizing: border-box; margin-bottom: 1.5rem; font-family: &quot; color: rgb(96, 96, 128); font-size: 16px;"><span style="box-sizing: border-box;">As the FIFA World Cup 2022 Qatar is getting ready to kick off, the attackers have already started their operations.&nbsp;</span><a href="https://socradar.io/what-is-extended-threat-intelligence-and-how-does-it-make-a-difference/" style="box-sizing: border-box; color: rgb(255, 84, 98); background-color: transparent; font-weight: 600;"><span style="box-sizing: border-box;"><span style="box-sizing: border-box;">SOCRadar&nbsp;</span><span style="box-sizing: border-box;">Extended&nbsp;</span><span style="box-sizing: border-box;">Threat&nbsp;</span><span style="box-sizing: border-box;">Intelligence</span></span></a><span style="box-sizing: border-box;">&nbsp;platform has detected various intelligence from different sources, and SOCRadar researchers focused on profiling threat actors targeting this prestigious organization.&nbsp;</span></p>