Security News > 2024 > March > Spa Grand Prix email account hacked to phish banking info from fans
Hackers hijacked the official contact email for the Belgian Grand Prix event and used it to lure fans to a fake website promising a €50 gift voucher.
The Spa Gran Prix is a Formula 1 World Championship race held at the Circuit de Spa-Francorchamps in Stavelot, Belgium.
In a press release sent to BleepingComputer, the race organizer explains that the email account was hijacked on Sunday, March 17, 2024 and was followed by the threat actor sending fraudulent emails to an undisclosed number of people.
The message informed the recipient that a €50 voucher for purchasing tickets for the F1 Grand Prix could be claimed by clicking on an embedded link.
The link redirected to a fake website that resembled the official portal of the Spa Grand Prix, where they were asked for personal details, including banking info.
BleepingComputer asked SPA GP about the number of impacted individuals and what other information, besides email addresses, the hackers have accessed, but we have yet to receive further clarification.