Large-Scale Fraud Campaign Utilizes Over 700 Domains to Sell Fraudulent Tickets

QuoIntelligence noted that they saw a dramatic increase in certain keywords used by newly-minted domains – such as ticket, Paris, discount, offer – and soon uncovered operation Ticket Heist. File photo: Delpixel, ShutterStock.com, licensed.

CHANDLER, AR – Authorities have discovered that a group behind a widespread internet scam – dubbed “Ticket Heist” – has been utilizing over 700 domain names, registered over the course of over two years, in order to sell fraudulent tickets and hotel accommodations to the Summer Olympic Games in Paris.

The operation, which researchers at threat intelligence company QuoIntelligence say seems to primarily target Russian-speaking individuals, has not only offered tickets to the Paris games – due to kick off July 26 – but other major sporting and music events as well.

QuoIntelligence notes that the group behind the scam first began creating the domains used to carry it out back in 2022, putting an average of 20 or so new ones online each and every month until they had hundreds of them.

The operation first gained attention from QuoIntelligence when they noticed online talk regarding the Paris games increasing at the tail end of 2023; the organization kept an eye on the proceedings based on the fact that the games have a great deal of influence upon geopolitical matters, as well as the ban placed upon Russian and Belarusian athletes from participating in the international sporting event due to their respective countries’ role in the ongoing war in Ukraine.

QuoIntelligence noted that they saw a dramatic increase in certain keywords used by newly-minted domains – such as ticket, Paris, discount, offer – and soon uncovered operation Ticket Heist.

All told, aside from some minor typos and grammatical Russian-to-English translation errors, the sites in question are said to look very professional and high-end, leading many victims to be easily hoodwinked and, ultimately, ripped off. Nearly all of the sites involved in the scam share nearly the same UI framework, with only minor differences in content and verbiage.

Ticket prices are also noticeable higher than the norm when compared to legitimate sites.

With that being said, QuoIntelligence cautions those looking to attend the Paris games to make sure they only use reputable, trusted sites to avoid being taken advantage of.