A web page, which imitates the official FIFA website and prompts visitors to sign a petition in defence of Uruguayan striker Luis Suárez, lures victims to a spam mailing list or even to malicious attachments.,
According to Kaspersky, the phishing page matches the design of the official website and all links on it redirect users to FIFA’s official site. To sign the petition, the user needs to fill out a form, entering their name, country of residence, mobile phone number and email address. After filling out the ‘petition’ form, victims were encouraged to share a link to the page with their friends on Facebook.
This enables the phishing link to spread widely across Facebook in just a couple of days as messages with links to the phishing page were also seen on dedicated forums, which is probably how users originally reached the offending page.
The petition claims to be for fans who are unhappy about the Uruguayan’s disqualification ban and a fine for biting the shoulder of Italian defender Giorgio Chiellini. This could also catch users seeking information on Suárez’s £75 million transfer from Liverpool to Barcelona.