Today's Edition
Batool Ghaith (Abu Dhabi)
Football fans watching the FIFA World Cup online have been warned: Watch only from official streaming channels, or risk being exposed to fraud, malware, identity theft and legal penalties.
Cybersecurity experts in the UAE have sounded the alarm over ads for "free" or low-cost streams that typically crop up during major sporting events. What some may see as harmless promotions could actually serve as a gateway for cybercriminals to hack into their devices, they said.
In a recent advisory, Digital Dubai urged football fans to exercise caution when accessing match broadcasts. The authority warned that unofficial streaming links may lead users to fake websites or platforms containing malicious software designed to steal personal information and compromise accounts.
Digital Dubai advised residents to watch matches through official platforms, verify links before opening them, and avoid sharing personal information or one-time passwords (OTPs).
Mohammad Alawadi, CEO of Xenon Intelligence, said illegal streaming devices often operate using modified software that may contain malware, spyware, credential stealers or hidden backdoors.
"These devices frequently bypass security controls, receive no legitimate updates and may connect to untrusted servers controlled by criminal actors," Alawadi told Aletihad.
He noted that users often underestimate the cybersecurity and privacy risks associated with such devices because they are attracted by free or heavily discounted content.
"In many cases, users are not aware of the risks they are exposing themselves to," he said.
According to Alawadi, personal information - including login credentials, browsing activity, payment details, IP addresses and other sensitive data - can potentially be collected or compromised through illegal streaming services.
He added that major sporting events such as the FIFA World Cup often trigger a rise in cyber threats, including phishing campaigns, fake streaming websites, malware distribution, and ticket scams targeting fans.
Ali Mustafa, Senior Cybersecurity Engineer at Defa3, said criminals are increasingly exploiting the global popularity of the World Cup to lure users into downloading malicious applications or accessing fraudulent streaming services.
He noted that thousands of FIFA-themed domains were registered ahead of the tournament, while cybercriminals may have already used fake World Cup streaming applications to distribute malware.
"The event itself becomes the social engineering lure. People who would never click on a suspicious link may do so when a match is about to kick off," Mustafa told Aletihad.
He warned that users who instal modified streaming applications or connect illegal streaming devices may unknowingly grant access to cybercriminals.
"You are installing software controlled by someone you cannot identify, with privileges inside your home network," he said.
He explained that compromised devices can be used to harvest passwords, monitor activity and create access points into other devices connected to the same Wi-Fi network, including phones, laptops and smart-home systems.
Personal data theft can occur in several ways, Mustafa said, including through fake registration pages that collect names, email addresses, and payment details, as well as malware that silently extracts credentials from infected devices.
He added that stolen information is often sold on underground markets and can later be used for fraud or identity theft.
Mustafa also warned that users may face legal consequences associated with unauthorised broadcasts. He explained that under UAE legislation governing copyright protection and cybercrime, distributing or sharing unauthorised content can expose individuals and businesses to penalties.
"Many people assume only sellers and distributors face legal consequences, but users should also understand the risks associated with accessing unlicensed content," he added.
Both experts urged fans to watch matches only through licensed broadcasters and official streaming platforms.
They also advised users to avoid downloading applications from unofficial sources, treat free streaming links with caution, enable multi-factor authentication, keep devices updated, and monitor accounts for suspicious activity.
"If a stream is free and unofficial, you are not the customer - you are the target," Mustafa said.
