K-Pop Scammers Target BTS Fans with Fake Tour Tickets
K-pop titans BTS are back, and so are the cybercriminals. Pentesting News is flagging a new wave of scam campaigns exploiting the band’s highly anticipated ‘ARIRANG’ world tour. Threat actors are setting up fraudulent websites designed to look like official ticket presale pages, preying on eager fans globally. These fake sites meticulously replicate official layouts and the purchasing process, making them incredibly convincing.
Pentesting News identified at least 10 fake domains popping up in early April, targeting locations like Argentina, Brazil, Chile, Colombia, France, Mexico, Peru, Portugal, and Spain. The scammers are leveraging social media, primarily Instagram, to spread links to these malicious sites. In Brazil, a specific ticketing tactic involving ‘pre-booking’ followed by in-person payment, intended to combat scalpers, has unfortunately created confusion and an opening for these fraudsters. Fans attempting to secure tickets are being tricked into paying for non-existent seats, losing both money and the chance to see their favorite band.
What This Means For You
- The exploitation of fan engagement and high-demand events like BTS tours highlights the need for cybersecurity teams to monitor social media and dark web channels for emerging phishing and scam campaigns that mimic legitimate ticketing or event platforms, especially during peak sales periods.