Crooks are using the upcoming World Cup to hoodwink Brazilian football fans into handing over their bank account details.
A new phishing attack contains a poorly Photoshopped image of a badly beaten Dunga, Brazil's coach, and a fake news story about an assault after he failed to pick Neymar and Ganso for his South Africa squad.
According to McAfee, clicking on the enclosed link bounces the user through a Taiwanese domain to a Trojan program hosted on a compromised web server belonging to the Malaysian government.
The Trojan, dubbed PWS-Banker, is a keylogger designed to steal usernames and passwords for its victims' online banking services.
It's now typical for phishers to try to exploit high-profile sporting events to socially engineer their victims, so we'll undoubtedly be seeing more of these kinds of attack as the World Cup frenzy increases worldwide.
If Rooney breaks his both his legs in a freak nightclub fight, Terry is found shagging Cappello's missus, or somebody gives Ronaldo the slap he so richly deserves, you can guarantee a scam promising photos will be not far behind.
For a faster and easier way to use the World Cup to empty your bank account, try buying tickets.