BrandShield Detects 1.5 Million Fake Domains and AI-Driven Scams in 2026
Israeli cybersecurity firm BrandShield detected over 1.5 million fake domains and phishing profiles in 2026, as scammers utilized advanced AI to exploit national emergencies and global brands.
The year 2026 concludes with alarming cyber threat statistics, as the Israeli cybersecurity firm BrandShield detected over 1.5 million fake domains, fraudulent websites, and malicious profiles throughout the year. The dramatic report reveals that attackers and scammers leveraged advanced artificial intelligence technologies to impersonate prominent entities, undermine public trust, and cynically exploit well-known brands, public figures, and national emergency situations.
Strategic Targets and Exploited Brands
Attackers targeted a wide array of strategic entities across the web. The report highlights approximately 10,395 fraudulent registrations linked to El Al, alongside 1,165 malicious websites that cynically impersonated the Hostages Families Headquarters to sell merchandise.
Internationally, the researchers tracked over 10,000 fake FIFA domains ahead of the 2026 World Cup, about 4,800 fraudulent registrations impersonating Elon Musk, and thousands of domains mimicking giant brands such as Omaha (5,878), Nike (5,134), Labubu (4,987), and iPhone (4,041). Yoav Keren, CEO of BrandShield, explained that threat actors strike where public trust is highest, noting that the more familiar the name, the easier it is to convince victims of a communication's legitimacy.
"Attackers go where public trust resides, and the more recognizable the name, the easier it is to make the victim believe the outreach is genuine," noted Yoav Keren, CEO of BrandShield.
AI-Powered Scams and Real-Time Surveillance
Alongside record volumes, fraud methodologies have evolved unprecedentedly. In one deceptive SMS campaign impersonating a transit authority regarding a fictitious 100-shekel debt, attackers monitored victims' typed details in real-time before they even clicked "send".
Furthermore, generative AI tools now enable threat actors to spin up entirely fake businesses—complete with logos, staff profiles, and fabricated testimonials in fields ranging from banking to plumbing and locksmithing—in roughly five minutes. CEO Keren emphasized that artificial intelligence has primarily transformed the scale, turning operations that once required substantial time and resources into a matter of minutes.
Throughout the year, BrandShield also exposed an international network operating from Hong Kong that sold counterfeit pharmaceuticals worldwide while masquerading as official health organizations. Cybersecurity experts note that the sharp rise in phishing and impersonation attacks in Israel in recent years has closely tracked security and geopolitical events, as criminal syndicates and hacker groups routinely exploit emergencies and national milestones to distribute malware and harvest credit card details.
