Spa Grand Prix

Summary

The website of the Spa Grand Prix was compromised, resulting in the theft of email addresses that were used to send fraudulent messages offering a fake 50‑euro voucher; recipients who clicked the link were subsequently prompted to disclose bank and credit‑card information. The organization's director warned users never to provide such details in response to the emails, emphasizing that the entity does not request sensitive data via email.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On March 1, 2024, the website of the Spa-Francorchamps Grand Prix was hacked, a fact reported by RTBF. The breach led to the theft of email addresses associated with the site’s users. No additional technical specifics about the method of intrusion were provided in the report.

Using the stolen email addresses, the attackers distributed fraudulent messages that promised a fifty‑euro voucher redeemable on the Grand Prix website. Recipients who clicked the link in the email were directed to a page that requested their bank and credit card information. Several users reportedly entered their financial details after being prompted by the fake voucher offer. The phishing campaign thus attempted to harvest sensitive payment data from the compromised mailing list.

Vanessa Maes, the General Director of Spa Grand Prix, issued a public warning advising all recipients not to disclose any bank or credit card details in response to such emails. She emphasized that the organization would never solicit sensitive financial information via email. The warning aimed to prevent further victims from falling for the scam and to clarify the legitimate communication practices of the event.

Sources

Sources available to members: 1 source.