Hackers target Belgian Grand Prix fans with fake €50 voucher scam

In a concerning turn of events, hackers have exploited the official contact email for the Belgian Grand Prix, enticing Formula 1 enthusiasts with a deceptive promise of a €50 gift voucher. The Spa Gran Prix, renowned for its challenging circuit and international allure, faced a security breach as threat actors infiltrated the event’s communication channels, posing a risk to fans worldwide.

The Circuit de Spa-Francorchamps in Stavelot, Belgium, is gearing up for the prestigious Formula 1 World Championship race scheduled from July 26 to 28. However, the recent cyber incident has cast a shadow over the event’s preparations, emphasizing the growing threat posed by cybercrime in the sporting world.

According to a statement released by the race organizer to BleepingComputer, the malicious activity unfolded on Sunday, March 17, 2024, with hackers seizing control of the official email account. Subsequently, fraudulent emails flooded undisclosed inboxes, tempting recipients with the allure of a €50 voucher for purchasing F1 Grand Prix tickets.

Unsuspecting recipients who clicked on the embedded link were redirected to a counterfeit website resembling the authentic Spa Grand Prix portal. Here, they were coerced into divulging personal information, including sensitive banking details, falling victim to a sophisticated phishing scheme.

Spa Grand Prix swiftly sprang into action in response to the breach, issuing customer warnings and urging vigilance against clicking on suspicious links. The organization enlisted the expertise of its IT security subcontractor to fortify defenses and lodged a formal complaint with the Belgian cyber police on March 18, seeking justice for the nefarious breach.

Further inquiries regarding the extent of the breach and potential data exposure remain unanswered, underscoring the gravity of the situation. Spa Grand Prix emphasized its commitment to transparency while deferring to ongoing criminal investigations to uncover the perpetrators behind the cyber assault.