Illegal football streaming sites are absolutely riddled with dangerous malware

Man United vs Man City
(Image credit: OLI SCARFF/AFP via Getty Images)

Analysis of illegal websites used by hundreds of thousands to stream football matches worldwide has revealed fans are putting themselves at considerable risk.

According to a report from cybersecurity firm Webroot, almost all (92%) illegal football streaming websites contain some form of malicious content, from malware and phishing lures to social engineering scams.

The likelihood is, Webroot claims, that anyone that used an illegal website to watch last weekend’s Carabao Cup Final or action from Europe’s top domestic leagues will have been exposed to a sophisticated cryptocurrency scam designed to lift banking credentials.

In other cases, the sites analyzed were equipped with mechanisms to hijack the victim’s web browser, poisoning search results and taking control of push notifications to bombard the person with malicious ads. 

Illegal football streaming

With subscriptions for legitimate sports channels costing tens of dollars each month (and even more for the multiple subscriptions required to access all matches), many people are willing to take a gamble on illegal websites.

Although some will be blind to the risks, many others take every possible step to protect themselves, by always using a VPN and antivirus service and taking care when closing out tabs and pop-ups. However, Webroot maintains it is impossible to use illegal football streaming websites without incurring risk.

“These illegal streaming sites are a maze of scams, malware and dangerous content. Simply put there’s no ‘safe’ way to use them without putting yourself at risk,” said Kelvin Murray, Senior Threat Researcher at Webroot.

“The level of sophistication and detail behind the Bitcoin scam we found is a hallmark of a well thought-through and well-resourced criminal operation. These sites are purposely built to trap users into clicking on something nasty – whether that’s a scam or fake app, or serving up explicit and dangerous content.”

For seasoned web users, some of the scams found on football streaming sites will be easy enough to spot, characterized by poor spelling and grammar or promises that sound too good to be true.

However, the Webroot report provides a timely reminder that nobody is immune to a slip in concentration or lapse of judgement, so the only way to truly stay protected is to find another way to watch the footie.

Joel Khalili
News and Features Editor

Joel Khalili is the News and Features Editor at TechRadar Pro, covering cybersecurity, data privacy, cloud, AI, blockchain, internet infrastructure, 5G, data storage and computing. He's responsible for curating our news content, as well as commissioning and producing features on the technologies that are transforming the way the world does business.

Read more
A padlock resting on a keyboard.
Understanding and avoiding malvertizing attacks
Representational image of a cybercriminal
Criminals are spreading malware disguised as DeepSeek AI
A man falling into a mobile phone screen.
Safer Internet Day: how to avoid online scams and stay safe online
NordVPN
US hit with over 1.9 billion malware threats last year - here's how to stay safe
Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration.
Microsoft reveals over a million PCs hit by malvertising campaign
An illustration of a hooded hacker with an obscured face holding a large fingerprint against a red background.
ID theft – what happens when someone steals your identity
Latest in Security
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks
An image of network security icons for a network encircling a digital blue earth.
US government warns agencies to make sure their backups are safe from NAKIVO security issue
Laptop computer displaying logo of WordPress, a free and open-source content management system (CMS)
This top WordPress plugin could be hiding a worrying security flaw, so be on your guard
Computer Hacked, System Error, Virus, Cyber attack, Malware Concept. Danger Symbol
Veeam urges users to patch security issues which could allow backup hacks
UK Prime Minister Sir Kier Starmer
The UK releases timeline for migration to post-quantum cryptography
Representational image depecting cybersecurity protection
Cisco smart licensing system sees critical security flaws exploited
Latest in News
L-mount alliance
Sirui joins L-Mount Alliance to deliver its superb budget lenses for Leica, DJI, Sigma and Panasonic cameras
Security padlock and circuit board to protect data
Trust in digital services around the world sees a massive drop as security worries continue
A Lego Pikachu tail next to a Pebble OS watch and a screenshot of Assassin's Creed Shadow
ICYMI: the week's 7 biggest tech stories from LG's excellent new OLED TV to our Assassin's Creed Shadow review
Samuel and Romy standing very close together in A24's Babygirl movie
Everything new on Max in April 2025, including A24's Babygirl and The Last of Us season 2
An AMD Radeon RX 9070 XT made by Sapphire on a table with its retail packaging
AMD’s secret weapon against Nvidia seems to be stock – way more RX 9070 GPUs are rumored to be hitting shelves than RTX 5000 models
Hacker silhouette working on a laptop with North Korean flag on the background
North Korea unveils new military unit targeting AI attacks