Threat Actor
GHOST STADIUM
- First Reported
- May 28, 2026
- Latest Reported
- Jun 24, 2026
Reported Context (3)
- Group-IB identified GHOST STADIUM as a Chinese-speaking, financially motivated group operating a phishing campaign that used a fake FIFA website and more than 300 domains. Group-IB Maps GHOST STADIUM’s FIFA 2026 Phishing Infrastructure
- Group-IB identified Ghost Stadium as the Chinese-speaking hacking group behind a phishing campaign involving more than 300 domains impersonating FIFA. Weekly Roundup: Trump Mobile Data Exposure, FIFA Phishing and Supply-Chain Attacks
- Group-IB researchers attributed an operation using more than 300 cloned FIFA phishing sites for premium ticket fraud to this tracked threat actor. FBI Warns of Fake FIFA Sites Targeting 2026 World Cup Fans
People (1)
Threat Actors (1)
MITRE ATT&CK (7)
Vendors (3)
Products (7)
Tools (7)
Industries (1)
Countries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.