Cybercriminals launched a multi-vector attack targeting fans and teams ahead of the 2025 Belgian Grand Prix. The campaign involved phishing emails, fraudulent ticket websites, and malicious streaming platforms, exploiting a security breach of the official Belgian Grand Prix email account. This breach enabled large-scale phishing operations, with attackers distributing deceptive emails promising discounted tickets and exclusive access. The threat actors registered multiple malicious domains to impersonate official Formula 1 and Spa-Francorchamps websites, harvesting personal and payment information, distributing malware, and spreading misinformation. The attack demonstrated sophisticated domain spoofing techniques and strategic infrastructure distribution across multiple registrars to evade detection.