Argentine FA Breached via Year-Old Infostealer

The Argentine FA was breached, potentially stemming from an infostealer infection that occurred nearly a year before its discovery. According to cybersecurity firm Hudson Rock, the breach could be linked to disgruntled Egyptian football fans angered by Argentina’s World Cup victory over Egypt. Following the match, compromised emails from legitimate AFA domains claimed the win was unfair. Hudson Rock identified evidence of the infostealer infection dated back to September 2025 on a device used by an AFA software developer. This breach provided attackers access to crucial systems, including direct control over databases and internal communication portals. Some user credentials were simply hashed, while others were in plaintext, indicating security lapses. Coordinated attacks were claimed by ‘All Egyptian Cyber Warriors.’ Hudson Rock emphasized that weak passwords and unaddressed security gaps exacerbated the situation. The Argentine FA breached systems reflected a significant security oversight. The AFA is currently investigating and aims to implement robust security measures. Read more at:

https://www.theregister.com/security/2026/07/13/world-cup-grudge-attackers-may-have-scored-argentine-fa-access-via-year-old-infostealer-infection/5270302