A broad fraud campaign leveraging approximately 19,000 FIFA World Cup 2026 lookalike domains and banking malware embedded in pirated streaming applications is targeting consumers and enterprise employees. The FBI has issued a public advisory. No single vendor’s products are exploited; the threat is social engineering and unauthorized software execution. Enterprise risk centers on employees installing trojanized media applications on managed devices and credential theft affecting both personal and corporate accounts.