As World Cup fever grips football fans, cybersecurity experts are warning Moroccans against using pirated streaming applications and websites, saying the growing demand for free match broadcasts could expose users to serious cyber threats and personal data breaches.
Experts told Hespress AR that unauthorized streaming platforms often pose significant risks to users’ devices and personal information, particularly when accessed without adequate security precautions on smartphones, computers or smart TVs.
Hassan Kharjouj, a researcher specializing in digital systems and technology, warned that cybercriminals increasingly target smart televisions through malicious applications capable of turning devices into what are known as residential proxies.
According to Kharjouj, hackers can secretly connect a victim’s device to remote servers and exploit the user’s IP address, which may later be sold on black markets. Criminal activities carried out through that connection can then appear to originate from the victim’s home internet network.
“These applications can use a person’s internet connection without their knowledge, making it seem as though suspicious online activities are being conducted from the victim’s residence,” Kharjouj said.
He stressed that users have limited means of protecting themselves once they access unauthorized streaming platforms because they cannot verify the intentions of application developers. While some operators may simply seek advertising revenue, others may use the software to harvest personal information and sell it illegally.
Kharjouj also pointed to the scale of the threat, noting that the U.S. Federal Bureau of Investigation has identified thousands of fraudulent websites linked to online scams, highlighting the growing cybersecurity risks associated with major international events.
He warned that many unofficial applications may contain malware designed to steal banking credentials, passwords and personal information, urging users to avoid pirated services and rely instead on legal subscription-based platforms.
Taieb Hazzaz, an international cybersecurity and artificial intelligence expert and founder of the CYBERX Cyber Threat Monitoring and Response Center, said major sporting events such as the World Cup typically trigger a surge in fake streaming websites and applications claiming to provide free access to matches.
“These platforms represent a real threat to users’ personal data because they operate without legal or security guarantees,” Hazzaz said. “Some request excessive permissions, while others install malicious software capable of stealing passwords and banking information.”
He added that criminal networks frequently exploit public enthusiasm surrounding major tournaments by creating fraudulent streaming sites that redirect users to advertising pages or forms designed to collect personal information for resale on digital black markets or use in online fraud schemes.
Hazzaz noted a global increase in phishing campaigns linked to the World Cup, with cybercriminals using the names of national teams, star players and ticketing offers to lure unsuspecting victims.
To reduce risks, he advised users to rely exclusively on licensed and official streaming platforms and to avoid downloading applications from unofficial sources. He also urged users to carefully review application permissions, warning that requests for access to messages, cameras or unrelated device functions should raise immediate concerns.
The cybersecurity expert further cautioned against clicking on links circulated through WhatsApp, Telegram and social media platforms that claim to offer free streams or complimentary tickets, saying such links are often designed to steal personal information.
He also recommended enabling two-factor authentication on important accounts and keeping devices and applications updated to address potential security vulnerabilities.
“The attackers are not targeting football fans’ passion for the game,” Hazzaz said. “They are targeting their phones, their personal data and their money. A football match lasts 90 minutes, but the consequences of a compromised phone or bank account can last for years.”
add your comment
Terms of publication : Not to offend the writer, people, sacred things, or attack religions or the divine self, and refrain from racist incitement and insults.