Â鶹´«Ã½

Skip to main content

Major sporting events a prime target for cybercriminals, federal centre warns

Maxime Gohier holds the Olympic torch in front of the Mont-Saint-Michel on Friday, May 31, 2024 in Brittany. (Jeremias Gonzalez / AP Photo) Maxime Gohier holds the Olympic torch in front of the Mont-Saint-Michel on Friday, May 31, 2024 in Brittany. (Jeremias Gonzalez / AP Photo)
Share

The coming Paris Olympics and other major sporting events are tempting targets for cybercriminals and hacktivists looking to fatten their wallets, promote causes or pilfer secrets, federal security officials warn.

A Canadian Centre for Cyber Security bulletin published Friday says criminals operating online will very likely try to extort organizations involved in — or located near — major sporting events.

Cybercriminals will also likely try to ensnare individuals, including spectators, through phishing emails and malicious websites, the centre says.

Promises of discounted merchandise, free event tickets or access to a livestream of sporting events can be used to take advantage of people.

During the Olympics in Tokyo, sites prompted users to enter personal information to access event broadcasts, the bulletin notes. "One webpage posing as a television broadcasting schedule also tricked users into allowing browser notifications, then spammed them with malicious advertisements."

Big organizations generate large amounts of personal and financial information through their operations that cybercriminals can attempt to sell through "dark web" marketplaces or use later in scams, the bulletin says.

"Smaller businesses may not normally be targeted by cybercriminals to the same extent as larger organizations. However, we assess that their proximity to major international sporting events very likely makes them more desirable as targets for extortion."

It says this is especially true for the travel and hospitality sectors, which see a boost in online traffic due to events, increasing the amount of sensitive information they store.

The centre highlights a 2020 ransomware attack on an English football club that encrypted nearly all of its devices, paralyzing email, security cameras and turnstiles. Although the club refused to pay the demanded ransom, the disruption still proved costly.

Big sporting events provide an opportunity for hacktivists to widely promote their causes through website defacements, denial-of-service attacks and hack-and-leak operations, the centre points out.

"For example, the anti-government protests in France regarding controversial changes to the minimum pension age is likely a motivation for domestic hacktivism against the 2024 Paris Olympics."

It also warns that state-sponsored cyberthreat actors could target high-profile individuals and organizations involved in events with the aim of collecting sensitive information or gathering foreign intelligence.

While at a hotel in Rio de Janeiro, an International Olympic Committee official logged into the World Anti-Doping Agency database, the bulletin says. Their credentials were then stolen by Russia-backed threat actors and used to export large amounts of data.

"The compromise disclosed personal information, undermined public trust in WADA and affected Canadian athletes, including four members of Canada's women's soccer team."

The Cyber Centre encourages attendees, athletes, government officials and organizations associated with major international sporting events to take "appropriate measures to protect their systems."

This report by The Canadian Press was first published May 31, 2024.

CTVNews.ca Top Stories

WATCH LIVE

WATCH LIVE Helene strengthens to a Category 4 hurricane as it nears Florida's Gulf Coast

Helene strengthened into a Category 4 hurricane hours ahead of its expected landfall on Florida's northwest coast Thursday night, and forecasters warned that the enormous storm could create a 'nightmare' surge in coastal areas and bring dangerous winds and rain across much of the southeastern U.S.

Scammers are increasingly using emails to extort money from victims by threatening to reveal compromising photos, videos and personal information to their friends and family members, according to a new warning from Mounties in Metro Vancouver.

An Air Canada flight headed to Toronto from Frankfurt diverted to Edinburgh due to an emergency Thursday, the airline says.

Canadian singer K’naan has been charged with sexual assault after being arrested by police in Quebec City.

An NDP MP has introduced a bill that would criminalize residential school denialism, saying it would help stop harm caused toward survivors, their families and communities.

Local Spotlight

A pizza chain in Edmonton claims to have the world's largest deliverable pizza.

Sarah McLachlan is returning to her hometown of Halifax in November.

Wayne MacKay is still playing basketball twice at Mount Allison University at 87 years old.

A man from a small rural Alberta town is making music that makes people laugh.

An Indigenous artist has a buyer-beware warning ahead of Sept. 30, the National Day for Truth and Reconciliation.

Police are looking to the public for help after thieves broke into a Lethbridge ice creamery, stealing from the store.

An ordinary day on the job delivering mail in East Elmwood quickly turned dramatic for Canada Post letter carrier Jared Plourde. A woman on his route was calling out in distress.

Fire has destroyed a barn and 17,000 plants at a family-owned business in Lower Coverdale, N.B.

Before influencers on social media, Canada’s Jeanne Beker was bringing the world of high fashion down to earth and as Calgary’s Glenbow Museum gets a major make-over, it will include a new exhibition showcasing the pop culture icon.

Stay Connected