Cybercriminals Release 802,000 Stolen Accounts During World Cup Group Stage
On June 27 alone, threat actors released 802,000 accounts worth $14.8 million. Sellers offer warranties and linked payment cards. Prices rise with each round.
Details from HUMAN Security
HUMAN Security's Satori Threat Intelligence team found 12 million stolen streaming accounts, worth $220 million, tied to World Cup broadcasts on the dark web. This is a record high for such activity.
Key Points:
- Stolen accounts sell for as little as $5, compared to legitimate subscriptions costing $30 to $50.
- Some listings advertise linked payment cards, loyalty points, premium tiers, and warranties promising replacement accounts if buyers lose access.
- Accounts were likely obtained through credential-stuffing attacks or info-stealing malware.
- Over 4,300 fake FIFA domains and banking malware hidden in streaming apps were already targeting World Cup fans before the tournament began.
Context and Impact
Italian police recently seized a piracy app that streamed Sky, DAZN, and Netflix through hijacked real accounts, demonstrating the growing problem of credential-based piracy beyond the World Cup.
With Sunday’s final expected to set another viewership record, the window for this market is closing, but the credentials will likely outlast the tournament.