
Microsoft alone blocked 634+ million malicious login attempts on Qatari networks during Nov–Dec 2022.
Over 16,000 scam & phishing domains were created to target fans.
174+ fake World Cup websites were detected impersonating FIFA portals.
Millions of phishing emails targeted staff, broadcasters, and officials.
1) Nation-State Level Intrusion (China-linked APT Group)
A China-linked hacking group (BlackTech) breached a telecom provider’s network.
They gained access to router configuration databases.
Attack could have:
Disrupted TV broadcasting
Crashed stadium networks
Disabled communications infrastructure
2) Hacktivist Attacks – Anonymous Group
Anonymous launched cyber attacks on:
Qatar government
FIFA digital infrastructure
Motive:
Human rights protests
Political pressure campaigns
3) Phishing & Credential Theft Campaigns
Massive phishing operations targeted:
FIFA staff
Broadcasters
Match officials
Volunteers
Malware used:
Qakbot
Emotet
Formbook
4) Fake Ticket + Merchandise Scam Networks
Over 16,000 scam domains
Fake:
Ticket portals
Job portals
Merchandise stores
90+ compromised accounts found on Hayya Fan ID system
5) Espionage Operation – Project Merciless
Massive covert hacking campaign.
Targeted:
FIFA officials
Journalists
Activists
Critics of Qatar
Used:
Email hacking
Phone surveillance
Spy malware
Intelligence operations
🏟 Stadium Systems
5+ billion global viewers
Trillions in ad + betting money
National prestige
Political activism
Espionage operations
FIFA World Cup 2022 faced one of the largest cyber warfare events ever — involving nation-state hackers, hacktivists, scammers, and cybercrime gangs simultaneously.