With the 2026 FIFA World Cup underway, ‘football fever’ is sweeping across Asia Pacific.

Cybercriminals are capitalizing on football fever by pushing illegal streaming platforms and uncertified TV boxes that promise “free, unlimited access” to every match. 

Viewers often tolerate lagging screens or endless pop-up ads as the “price to pay” for free streams, not realizing these are major red flags that a device has been compromised. 

Even worse, cybercriminals could be secretly using home Wi-Fi networks  as proxies for illegal activity.

Of course, fans would love to watch live action as matches are played, or even just to find out more about Japan and Australia – the only two teams from the region to make it to the last 32 knockout stage – or why South Korea’s coach quit after the team could not make it.

But before our staff or hybrid workers click on the latest livestreams, here are some advice and tips from John Wojcik, Senior Threat Researcher, Infoblox, on how fans can stay safe.

“This World Cup season, instead of scoring goals, cybercriminals are scoring access into our home networks through illegal streaming services,” said Wojcik.

Just one click

“Fans looking for affordable ways to watch all matches may come across unofficial streaming websites or non-certified TV boxes that promise full access for cheap, or even for free.”

However, these can expose users to malware and data theft. 

Wojcik warned: “Once connected, non-certified TV boxes act like trojan horses, communicating with other devices on the network and turning your home or office into a proxy for cybercrime without you knowing. It’s like sleepwalking into the threat – a silent killer that operates behind the scenes.” 

Cybercriminals are also using the fact that internet users have grown used to cascades of pop-up ads. But, “one bad click is all they need to deliver malware or scams and gain access to the most private parts of our lives.” 

To stay safe, he advised, fans should avoid unofficial platforms and look out for red flags of non-certified TV boxes such as lacking certification from major providers and limited documentation. 

“For infected devices, they should follow three simple steps: Unplug it, factory reset it, and do not reconnect it.”