Why Major Sporting Events Attract Cybercriminals
Cybercriminals have consistently exploited major sporting events, and the Olympics are prime targets. The combination of massive global brand awareness and extensive digital footprints creates perfect conditions for opportunistic scammers.
A History of Olympic Cyber Threats
The threat is not new:
- Beijing 2008: Fake ticketing sites proliferated
- Pyeongchang 2018: State-aligned threat actors deployed wiper malware, shutting down Wi-Fi hotspots, TV feeds, and crippling the official app's back-end servers
- Ongoing threat: Hacktivist groups regularly exploit these events to promote their causes
As Milano-Cortina 2026 approaches, understanding the threat landscape is essential.
Top Threats During the Winter Olympics
1. Phishing Campaigns
Unsolicited emails, texts, and social media messages impersonate:
- Official game organizers
- Event sponsors
- Third-party vendors
Common tactics:
- Free streaming links leading to malware or credential theft
- Prize draws and "last chance" ticket offers
- Fake alerts about cancelled tickets or payment issues
2. Fraudulent Olympics Websites
E-commerce sites mimicking legitimate ticket, travel, and accommodation vendors. These sites harvest payment details and personal information while offering non-existent purchases.
Watch out for:
- Fake listings on genuine platforms like Airbnb, eBay, and Facebook Marketplace
3. Illegal Streaming Sites
Sites offering "free access" to Olympic content are often loaded with:
- Malware-infected links and plugins
- Malicious video overlay ads
- Drive-by downloads
4. Malicious Mobile Apps
Fake Olympics apps containing infostealing malware, primarily distributed through third-party app stores.
5. SEO Poisoning
Scammers use paid ads and SEO techniques to rank malicious websites at the top of search results, triggering drive-by downloads or harvesting personal information.
6. Social Media Support Scams
Fraudsters monitor social media complaints about flights, hotels, or tickets, then pose as official support to steal personal, financial, and booking information.
7. Fake Employment Opportunities
Bogus volunteer or paid positions designed to harvest personal information or trick victims into paying processing fees.
8. AI-Powered Scams
Next-generation threats leveraging artificial intelligence:
- Mass-generated phishing websites and messages in flawless local languages
- Deepfake videos of athletes soliciting donations for fake charities
- Realistic audio impersonations
9. QR Code Phishing (Quishing)
QR codes at event venues leading to phishing sites and malware downloads. This tactic exploits:
- Lower suspicion compared to phishing URLs
- Weaker mobile device security
- Physical proximity creating false trust
10. Fake Public Wi-Fi
Lookalike hotspots designed to intercept personal and financial information from event attendees.
Comprehensive Safety Guidelines
Official Channels Only
Tickets: Only purchase from:
- tickets.milanocortina2026.org
- hospitality.milanocortina2026.org
Note: Organizers have NOT authorized any third-party ticketing resellers.
Merchandise: Only shop at shop.olympics.com
Streaming: Stick to official broadcasters:
- NBCUniversal (US)
- BBC (UK)
- Warner Bros Discovery (Europe)
Essential Security Practices
- Never trust unsolicited "too-good-to-be-true" deals
- Don't click links or open attachments in unsolicited messages, even from seemingly legitimate sources
- Scrutinize all listings for red flags, even on legitimate platforms
- Check reviews and verification badges before transacting
- Use official in-app messaging on marketplace platforms
- Download only official apps from verified sources
- Avoid public Wi-Fi when possible; use VPN if necessary
- Never log into high-value accounts (email, banking) on public networks
- Don't scan QR codes from emails or unknown sources at events
- Install reputable anti-malware software to mitigate phishing risks
Verify Employment Opportunities
Official volunteering: team26.milanocortina2026.org
Official paid positions: milanocortina2026.intervieweb.it/en/career
Remember: Legitimate Olympic positions NEVER require upfront payment.
Conclusion
The XXV Winter Olympic Games in Milano-Cortina promises to be spectacular for sports fans worldwide. However, cybercriminals will be equally attentive to opportunities. By maintaining vigilance, sticking to official channels, and following these security best practices, you can enjoy the games safely.
Stay informed, stay skeptical, and enjoy the competition.
Source: WeLiveSecurity - ESET Blog