How a hacker could have Rickrolled the entire World Cup

A polite caller from your bank says there is a problem with your account. Don't worry - they'll send someone round to help. They'll even take your cards away to keep them safe. The scam has run rampant, until Dutch police plastered blurred photos of 100 suspects across billboards, supermarkets, and TikTok, with a two-week ultimatum to turn themselves in... or else.

Meanwhile, a security researcher called Bob DaHacker got her hands on the live broadcast controls for every match of the 2026 FIFA World Cup. She could have Rickrolled the entire planet, but actually spent days trying to find anyone at FIFA who would pick up the phone.

Plus! Don't miss our featured interview with Black Kite's Jeffrey Wheatman exploring ransomware and extortion attacks across Europe.

All this and more in episode 473 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Danny Palmer.

EPISODE LINKS:

• Suspected cyberattack triggers false emergency alerts across parts of Brazil - The Record.
• Gizmodo readers hit with ClickFix malware prompts after account compromise - The Register.
• Two men plead guilty over £39m Transport for London cyber attack - BBC News.
• Helpdesk scammers are making house calls to make their lies feel more real - The Register.
• Dutch cops’ shame games nets 74 wanted fraudsters - The Register.
• Omgebrachte vrouw (80) in Amsterdam vermoedelijk slachtoffer van nepagenten - NU.
• Mr Benn - Wikipedia.
• I Could've Rickrolled the Entire FIFA World Cup. All I Needed Was My ID - Bobdahacker.
• Bug in FIFA World Cup internal system gave anyone ability to modify TV stream - TechCrunch.
• Iceberger - Draw an iceberg and see how it will float.
• Fallout: London - GOG.
• Smashing Security merchandise (t-shirts, mugs, stickers and stuff)

SPONSORS:

• Black Kite - Read Black Kite's 2026 European Cyber Risk Report to explore the latest ransomware trends, top threat actors, and how supplier breaches are reshaping cyber risk across Europe.
• Proton Pass - The password manager for businesses that can't compromise on security or slow their team down. Start a free trial.
• Vanta - Expand the scope of your security program with market-leading compliance automation… while saving time and money. Smashing Security listeners get $1000 off!

SUPPORT THE SHOW:

Tell your friends and colleagues about “Smashing Security”, and leave us a review on Apple Podcasts or Podchaser.

Become a supporter! Join Smashing Security PLUS via Patreon or Apple Podcasts for ad-free episodes on our early-release feed!

FOLLOW THE SHOW:

Follow us on Bluesky or Mastodon, or on the Smashing Security subreddit, and visit our website for more episodes.

THANKS:

Theme tune: "Vinyl Memories" by Mikael Manvelyan.

Assorted sound effects: AudioBlocks.

Privacy & Opt-Out: https://redcircle.com/privacy