惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

酷 壳 – CoolShell
酷 壳 – CoolShell
H
Hacker News: Front Page
P
Palo Alto Networks Blog
T
ThreatConnect
Apple Machine Learning Research
Apple Machine Learning Research
博客园_首页
T
True Tiger Recordings
P
Privacy & Cybersecurity Law Blog
B
Blog
IT之家
IT之家
Last Week in AI
Last Week in AI
F
Full Disclosure
Hacker News: Ask HN
Hacker News: Ask HN
C
Comments on: Blog
Microsoft Azure Blog
Microsoft Azure Blog
C
Cybersecurity and Infrastructure Security Agency CISA
Microsoft Security Blog
Microsoft Security Blog
博客园 - 【当耐特】
N
News and Events Feed by Topic
NISL@THU
NISL@THU
腾讯CDC
雷峰网
雷峰网
Security Latest
Security Latest
李成银的技术随笔
M
Microsoft Research Blog - Microsoft Research
L
LangChain Blog
L
Lohrmann on Cybersecurity
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
C
Check Point Blog
Y
Y Combinator Blog
Recent Announcements
Recent Announcements
博客园 - Franky
N
News | PayPal Newsroom
V
V2EX
A
About on SuperTechFans
The Register - Security
The Register - Security
月光博客
月光博客
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Google Online Security Blog
Google Online Security Blog
MyScale Blog
MyScale Blog
Cisco Talos Blog
Cisco Talos Blog
Vercel News
Vercel News
WordPress大学
WordPress大学
C
Cyber Attacks, Cyber Crime and Cyber Security
The Hacker News
The Hacker News
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
爱范儿
爱范儿
A
Arctic Wolf
L
LINUX DO - 最新话题
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More

WeLiveSecurity

The quest for greater tech independence Why geopolitical turmoil is a gift for scammers, and how to stay safe FrostyNeighbor: Fresh mischief and digital shenanigans Eyes wide open: How to mitigate the security and privacy risks of smart glasses Fake call logs, real payments: How CallPhantom tricks Android users Fixing trivial passwords is as easy as 123456 A rigged game: ScarCruft compromises gaming platform in a supply-chain attack This month in security with Tony Anscombe – April 2026 edition The calm before the ransom: What you see is not all there is GopherWhisper: A burrow full of malware New NGate variant hides in a trojanized NFC payment app Ransomware’s back office: What the ransom note won’t say Why that next data breach alert could be a trap Supply chain dependencies: Have you checked your blind spot? Recovery scammers hit you when you’re down: Here’s how to avoid a ‘second strike’ As breakout time accelerates, prevention-first cybersecurity takes center stage Digital assets after death: Managing risks to your loved one’s digital estate This month in security with Tony Anscombe – March 2026 edition RSAC 2026 wrap-up – Week in security with Tony Anscombe A cunning predator: How Silver Fox preys on Japanese firms this tax season Virtual machines, virtually everywhere – but not all protected Cloud workload security: Mind the gaps Move fast and save things: A quick guide to recovering a hacked account EDR killers explained: Beyond the drivers Face value: What it takes to fool facial recognition Cyber fallout from the Iran war: What to have on your radar Sednit reloaded: Back in the trenches What cybersecurity actually does for your business How SMBs use threat research and MDR to build a defensive edge Protecting education: How MDR can tip the balance in favor of schools This month in security with Tony Anscombe – February 2026 edition Mobile app permissions (still) matter more than you may think Faking it on the phone: How to tell if a voice call is AI or not PromptSpy ushers in the era of Android threats using GenAI Is Poshmark safe? How to buy and sell without getting scammed Is it OK to let your children post selfies online? Naming and shaming: How ransomware groups tighten the screws on victims Taxing times: Top IRS scams to look out for in 2026 OfferUp scammers are out in force: Here’s what you should know This month in security with Tony Anscombe – January 2026 edition DynoWiper update: Technical analysis and attribution Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan Drowning in spam or scam emails lately? Here’s why ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025 Children and chatbots: What parents should know Common Apple Pay scams, and how to stay safe Old habits die hard: 2025’s most common passwords were as predictable as ever Why LinkedIn is a hunting ground for threat actors – and how to protect yourself Is it time for internet services to adopt identity verification? Your information is on the dark web. What happens next? Credential stuffing: What it is and how to protect yourself This month in security with Tony Anscombe – December 2025 edition A brush with online fraud: What are brushing scams and how do I stay safe? Revisiting CVE‑2025‑50165: A critical flaw in Windows Imaging Component LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan ESET Threat Report H2 2025 Black Hat Europe 2025: Was that device designed to be on the internet at all? Black Hat Europe 2025: Reputation is currency – even in the ransomware economy Locks, SOCs and a cat in a box: What Schrödinger can teach us about cybersecurity Seeking symmetry during ATT&CK® season: How to harness today’s diverse analyst and tester landscape to paint a security masterpiece The biggest catch: How whaling attacks target top executives Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture MuddyWater: Snakes by the riverbank Oversharing is not caring: What’s at stake if your employees post too much online This month in security with Tony Anscombe – November 2025 edition What parents should know to protect their children from doxxing Influencers in the crosshairs: How cybercriminals are targeting content creators MDR is the answer – now, what’s the question? The OSINT playbook: Find your weak spots before attackers do PlushDaemon compromises network devices for adversary-in-the-middle attacks What if your romantic AI chatbot can’t keep a secret? Can password managers get hacked? Here’s what to know Why shadow AI could be your biggest security blind spot In memoriam: David Harley The who, where, and how of APT attacks in Q2 2025–Q3 2025 ESET APT Activity Report Q2 2025–Q3 2025 Sharing is scaring: The WhatsApp screen-sharing scam you didn’t see coming How social engineering really works | Unlocked 403 cybersecurity podcast (S2E6) Ground zero: 5 things to do after discovering a cyberattack This month in security with Tony Anscombe – October 2025 edition Fraud prevention: How to help older family members avoid scams Cybersecurity Awareness Month 2025: When seeing isn't believing Recruitment red flags: Can you spot a spy posing as a job seeker? How MDR can give MSPs the edge in a competitive market Cybersecurity Awareness Month 2025: Cyber risk thrives in the shadows Gotta fly: Lazarus targets the UAV sector SnakeStealer: How it preys on personal data – and how to stay safe Cybersecurity Awareness Month 2025: Building resilience against ransomware Minecraft mods: When ‘hacking’ your game becomes a security risk IT service desks: The security blind spot that may put your business at risk Cybersecurity Awareness Month 2025: Why software patching matters more than ever AI-aided malvertising: How chatbots can help spread scams How Uber seems to know where you are – even with restricted location permissions Cybersecurity Awareness Month 2025: Passwords alone are not enough The case for cybersecurity: Why successful businesses are built on protection Beware of threats lurking in booby-trapped PDF files Manufacturing under fire: Strengthening cyber-defenses amid surging threats New spyware campaigns target privacy-conscious Android users in the UAE Cybersecurity Awareness Month 2025: Knowledge is power This month in security with Tony Anscombe – September 2025 edition
A slippery slope: Beware of Winter Olympics scams and other cyberthreats
2026-02-02 · via WeLiveSecurity

Digital Security

It’s snow joke – sporting events are a big draw for cybercriminals. Make sure you’re not on the losing side by following these best practices.

02 Feb 2026  •  , 5 min. read

A slippery slope: Beware of Winter Olympics scams and other cyberthreats

Cybercriminals have always been drawn to major sporting events. A combination of global brand awareness and an extensive digital footprint make them a popular option for opportunistic scammers. And events don’t get much bigger or better known than the Olympics.

Cybercriminals have been looking to capitalize on the Olympics for years – for example, fake ticketing sites proliferated way back during the Beijing 2008 Summer Olympics. Since then, even some state-aligned threat actors have got involved, disrupting the Pyeongchang 2018 games by using wiper malware that shut down Wi-Fi hotspots and TV feeds, and crippled the back-end servers of the games’ official app. Some hacktivists are never far away either, spying a perfect opportunity to draw attention to their cause.

But as the world prepares for Milano-Cortina 2026, what are the most common threats that you should look out for? And how can you stay safe?

What to watch out for

There are various threats that sports fans should look out for in the days leading up to the event, and the 16 days of the games. They include:

Phishing attempts

These are unsolicited emails, texts or social media messages impersonating the official organizers of the games, sponsors or other third parties. Typically, they will try to trick you into entering your personal and financial information, or clicking on malicious links/opening attachments which result in silent malware installation. Examples include:

  • Free streaming links that lead to malware delivery or credential theft
  • Special prize draws and ‘last chance offers’ such as tickets to the games
  • Alerts about cancelled tickets or payment issues

Fake Olympics sites

Some e-commerce sites purporting to sell official tickets, travel and accommodation may look like the real deal. But they just want your money and/or card details. Your purchase does not exist. In some cases, scammers might also put fake listings on genuine sites and marketplaces, like Airbnb, eBay and Facebook Marketplace.

Free and illegal streaming sites

Some sites offer sports fans free access to video content from the games. But these sites could also be a hotbed of malware hidden in links, plugins and files. They’re also full of video overlay ads that aren’t often just a minor inconvenience. Instead, many tend to be malicious and when you click on them, you’ll be redirected to a malicious website or unwittingly download malware on your device.

Fake apps

Mobile apps masquerading as official Winter Olympics apps may actually contain infostealing malware or other threats. Such malicious apps are mainly found on various third-party app stores.

SEO poisoning

Scammers pay for sponsored ads or use SEO techniques to put their malicious websites at the top of search results. They may trigger drive-by-downloads or try to obtain your personal information.

Support scams

If you complain on social media about an issue with your flight/hotel/tickets, fraudsters may jump in posing as ‘official support.’ They don’t really want to help, they just want your personal, financial and booking information.  

Fake employment scams

Look out for bogus opportunities to join the Olympics as a volunteer or paid worker. These are usually designed to either harvest your personal information or trick you into paying an upfront ‘fee’ to process your details.   

AI-powered scams

Fraudsters are increasingly using AI-powered tools and services to increase their chances of success. They can generate phishing websites and messages at scale in flawless local languages. And they can also create realistic audio and video designed to influence your decision making. Watch out for deepfake videos of famous athletes seeking to solicit donations for fake charities or ‘training funds.’

QR code phishing

If you’re at the event, look out for quishing attempts. QR codes posted at events may actually lead to phishing sites and malware downloads. It’s a favored tactic that blends physical and digital threats to steal your payment details or personal information. It’s particularly effective tactic because it often doesn’t arouse the same level of suspicion among people as, say, phishing URLs. Mobile devices are also often less well protected than laptops and desktops, so there’s more chance of success.

Public Wi-Fi

If you’re out and about at the event, beware of fake and lookalike hotspots designed to capture your personal and financial information.

Staying safe from Winter Olympics scams

To stay safe online, stick to the official Winter Olympics sites and don’t engage with unsolicited messages and too-goo-to-be-true deals. More specifically:

  • Only buy tickets from https://tickets.milanocortina2026.org/ or https://hospitality.milanocortina2026.org/. The event organizers have not authorized resale on any third-party ticketing sites.
  • Stick to the official site, shop.olympics.com for merchandise.
  • Avoid pirated streaming services and only visit sites hosted by the official broadcasters, including NBCUniversal (US), BBC (UK), Warner Bros Discovery (Europe).
  • Never trust too-good-to-be-true deals in unsolicited messages.
  • Avoid clicking on links or opening attachments in unsolicited messages, even if they appear to be from legitimate Winter Olympics organizers/sponsors.
  • Scrutinize listings for red flags, even if they’re on legitimate sites. Check out reviews, always use the official in-app messaging service and prioritize sellers with “verified” badges or similar.
  • If you’re going to the event, download the official Olympics app for schedules, maps, and digital tickets.
  • Avoid public Wi-Fi where possible, or use a VPN if you can. If you have to use a hotspot, don’t log in to high-value accounts, such as your email or online banking.
  • Avoid scanning QR codes at the event, or ones that turn up in emails.
  • Install anti-malware on your device from a reputable vendor to mitigate the risk of quishing, smishing and email-based phishing.
  • Remember that the Olympic games organizers never ask for money to volunteer or work there. Official volunteering sites can be found at https://team26.milanocortina2026.org/ and paid roles can be found at https://milanocortina2026.intervieweb.it/en/career.

The XXV Winter Olympic Games in Milano-Cortina is set to be a treat for sports fans around the world. But digital scammers will also be paying close attention. Enjoy the fun, and stay safe.  


Let us keep you
up to date

Sign up for our newsletters