{"success":true,"data":{"id":"fake-ticketmaster-event-ticket-platform-phish","label":"Fake Ticketmaster / event ticket platform account suspended phishing — impersonates Ticketmaster, StubHub, SeatGeek, Eventbrite, AXS, or Live Nation claiming account compromised, suspended, or breached, driving to credential-harvest page; spiked 280% H2 2024 following the ShinyHunters Ticketmaster breach affecting 560M customers; victims lose both login credentials and access to upcoming event tickets","description":"Phishing emails impersonating Ticketmaster, StubHub, SeatGeek, Eventbrite, AXS, or Live Nation claiming the victim's event ticket account has been suspended, compromised, or accessed without authorization — driving to a credential-harvest page disguised as the platform's login portal. Key facts: (1) ShinyHunters May 2024 Ticketmaster breach: 560 million customer records stolen (names, addresses, partial payment card data, event purchase history), triggering an immediate wave of follow-on phishing campaigns that exploited victim fear of account takeover; APWG reported event-platform phishing up 280% H2 2024 compared to H1; (2) The attack is compounded by the high financial value of event tickets — victims who click and enter credentials risk not only credential theft but also losing access to upcoming events for which they paid significant amounts; scammers resell stolen event ticket inventory or transfer tickets to attacker-controlled accounts before victims can act; (3) Post-breach phishing campaigns routinely impersonate the breached company, targeting the same victim population with \"account security verification\" emails that feel plausible because victims know a real breach occurred — this \"breach aftermath\" phishing is increasingly common and dangerous; (4) Legitimate Ticketmaster, StubHub, SeatGeek, and Eventbrite security communications arrive only from their verified domains and direct users to the official app or website — they never include links to third-party verification pages or request password re-entry via email. Warning signs: sender not official platform domain, urgency about account deactivation within hours, link to non-official domain, no reference to specific upcoming events or order numbers in the account.","tier":"danger","category":"phishing","isThin":false}}