Threat Intelligence

Assessment: Olympic Winter Games Milano Cortina 2026

by ZeroFox Intelligence
Assessment: Olympic Winter Games Milano Cortina 2026
29 minute read

Introduction

The Olympic Winter Games Milano Cortina 2026 will take place from Friday, February 6, 2026, through Sunday, February 22, 2026, across multiple locations in northern Italy, with over two million guests expected to attend.1 Primary host sites include Milan, Cortina d’Ampezzo, Anterselva, Livigno, Predazzo, Bormio, Tesero, and Verona, with events distributed between urban city arenas and alpine mountain venues.2 The Opening Ceremony is scheduled to be held in San Siro Stadium in Milan, and the Closing Ceremony will take place at the Verona Arena.3,4 

The Games will feature competition across traditional winter sports, including alpine skiing, biathlon, cross-country skiing, curling, figure skating, ice hockey, speed skating, short track speed skating, ski jumping, Nordic combined, freestyle skiing, snowboarding, luge, and skeleton. In addition, ski mountaineering will make its Olympic debut. Approximately 116 medal events are planned for the 2026 Winter Olympic Games.

Competition is scheduled daily throughout the two weeks, with medal events beginning shortly after the Opening Ceremony and continuing through the final weekend. Events will occur concurrently across multiple venues and regions, requiring significant inter-city transportation and coordination. The geographic dispersion of competition sites, high international attendance, and global media coverage are expected to increase logistical and security demands throughout the duration of the Games.5

ZeroFox assesses civil unrest in Italy has an unlikely chance of disrupting aspects of the 2026 Winter Olympics; however, this situation should be continuously monitored for changes as the Games and related events approach. In the weeks leading up to the Games, there has been a spike in anti-American sentiment, particularly related to recent U.S. foreign and immigration policy.

ZeroFox did not identify any evidence of active or coordinated threats on the deep and dark web (DDW) targeting the Games. However, we identified threats that pose a passive risk, including compromised credentials and botnet logs for sale, as well as suspicious domains impersonating official 2026 Winter Olympics branding. Additionally, ZeroFox identified accommodation and ticket scams that pose a risk to attendees and viewers.

Physical Security Preparations 

There will almost certainly be a significant period of heightened security and travel disruptions across northern Italy throughout February 2026. Additional police, military personnel, and civilian security staff will be deployed at the Olympic venues, athletes' villages, media hubs, and other key locations. Officials are expected to install concentric layers of access checks around high-priority sites. In parallel, security is likely to be heightened at landmark tourist locations and other sensitive sites across northern Italy. Road closures and additional security zones will be implemented for the duration of the Games.6

  • Crime rates and criminal incidents vary drastically throughout northern Italy, with the highest probability of occurrence being within Milan and Verona. However, these crimes are rarely violent. Petty crimes, such as pickpocketing and theft, are typically opportunistic in nature and will likely increase with the influx of visitors to the region over the course of the 2026 Winter Olympic events.

Geopolitical Threats

Terrorism in Italy

ZeroFox assesses with low confidence that a terrorist attack targeting the 2026 Winter Olympics has almost no chance of occurring, and we have not identified any specific or credible threats to the Games or its venues. Nonetheless, opportunistic attacks cannot be discounted, given the well-documented history of terrorist incidents targeting sporting events, other past Olympics, and mass gatherings globally. The greatest threat very likely stems from low-sophistication attacks by lone actors and small groups—which are inherently difficult to detect and mitigate—using blades, rudimentary explosives, and vehicles as weapons.

The U.S. State Department currently has a Level 2 travel advisory in place for Italy (Exercise Increased Caution), which was issued on May 23, 2025, citing terrorism risks. According to the U.S. State Department, terrorist attacks may occur with little or no warning and target tourist sites, transportation hubs, shopping areas, government buildings, hotels, restaurants, religious sites, parks, sporting or cultural events, schools, and airports.7

Notably, Italy has successfully held other Olympic and large-scale events without incident in the past. The country’s most recent brush with a possible terrorist attack occurred in September 2025, when Italian police and special forces reportedly thwarted a possible terrorist attack meant to target a Catholic festival.8 Despite the low frequency of attacks, violent extremist and militant groups (such as the Islamic State and its affiliates) almost certainly remain intent on targeting the West and continue to inspire and motivate their followers through online propaganda and radicalization. Moreover, major events such as the Olympics are almost certainly attractive targets for individuals or groups seeking to cause harm and maximize the impact of an attack.

The 2026 Winter Olympics venues are dispersed across a wide geographical area, creating challenges for maintaining complete security control. ZeroFox assesses there is a very unlikely chance that the public spaces surrounding these sites—such as plazas, fan zones, and transport hubs—will serve as staging areas for activist groups or be targeted by individuals seeking to exploit the Games' high profile. While overall the risk of an attack at the 2026 Winter Olympics is very unlikely, security measures should remain consistent with those of comparable global events, and attendees should be vigilant and exercise standard safety precautions, as large gatherings have historically been attractive targets for terrorists and extremists.

Civil Unrest in Italy

In October 2025, Italy experienced one of its largest waves of protests in years. Unions such as Italian General Confederation of Labour (CGIL) and Unione Sindacale di Base (USB) mobilized workers and citizens in dozens of cities to conduct nationwide strikes and demonstrations in support of the Global Sumud Flotilla and against the war in Gaza.9 Reports indicated more than two million people took part in marches and general strike actions that disrupted public transport, blocked roads and ports, and brought schools and services to a standstill in Italy as thousands filled city centers from Rome to Milan.

More recently, a national general strike called by Italy’s largest union, CGIL, took place on December 12, 2025, to protest the government’s proposed 2026 budget, drawing tens of thousands of participants and causing widespread disruption to trains, schools, healthcare services, and other public services across the country.10 Demonstrations accompanied the strike in major cities, highlighting Italian workers' ongoing discontent with the country's economic and social policies.

These events reflect an ongoing pattern of frequent, highly disruptive protests and strikes in Italy, which almost certainly impact transportation and public life and occasionally escalate into tensions in key urban areas. ZeroFox assesses civil unrest in Italy has an unlikely chance of disrupting aspects of the 2026 Winter Olympics; however, this situation should be continuously monitored for changes as the Games and related events approach.

Boycotts

ZeroFox observed an uptick in anti-American sentiment in the run-up to the Games, particularly related to activity by U.S. Immigration and Customs Enforcement (ICE) and U.S. policy related to Venezuela. Anti-ICE sentiment will likely escalate following confirmation that ICE officers will conduct security operations at the Games, particularly around the attendance of U.S. Vice President JD Vance.11

ZeroFox also observed petitions calling for denial of entry to ICE personnel at Milano Cortina 2026.

Lastly, ZeroFox also observed social media commentary calling for Team USA to be expelled from the 2026 Winter Olympics due to U.S. foreign policy.

Major Competition Zones | Public Safety & Transportation

Cortina d’Ampezzo

Crime and Public Safety

While Cortina d’Ampezzo has a low crime rate compared to major Italian cities, government crime statistics for this remote area of Italy are generally sparse, not publicly available, or published in Italian. Most open-source reporting on crime in the area is limited to travel sites and tourist blogs; ZeroFox cannot confirm the accuracy and reliability of the information from these sources. According to available data, violent crime is rare, and most reported incidents involve petty theft (particularly during peak tourist seasons).12 Overall, Cortina d’Ampezzo is considered a safe destination for visitors and athletes.

In the context of the Olympic Winter Games Milano Cortina 2026, Italian authorities have reported isolated cases of organized crime attempts to exploit Olympic‑related construction and procurement activities. According to reporting, arrests were made in connection with alleged mafia‑style efforts to influence or gain control over contracts linked to Games infrastructure. These cases relate to economic and procurement crime rather than public safety risks for visitors, and ongoing law enforcement oversight aims to safeguard the integrity of Olympic operations.13

Public and Air Transportation

Cortina d’Ampezzo has a limited but strategically managed public transportation network primarily based on bus services, as the town has no direct rail connection. Local mobility is provided by Dolomiti Bus, which operates urban routes within Cortina and regional services connecting nearby valleys and towns, as well as seasonal ski-bus and shuttle services linking accommodations, competition venues, and lift areas.14 Additional long-distance coach operators (such as Cortina Express and ATVO) connect Cortina with major transport hubs, including Venice and Treviso. While taxis are available, they are limited in number. During the 2026 Winter Olympic Games, private vehicle access and parking near venues will be highly restricted, with controlled traffic zones, park-and-ride facilities, and enhanced shuttle operations in place, making public buses and official shuttles the primary and encouraged mode of transport for spectators, the workforce, and athletes.15

  • The lack of diversified public transportation in Cortina d’Ampezzo has impacted ticket sales, with authorities limiting ticket sales to what can be accommodated by public transportation services. Measures such as shuttle buses and vehicle permits are being planned to reduce traffic during the Games.16

Cortina d’Ampezzo does not have an active commercial airport. Air travel for the 2026 Winter Olympics will rely on nearby regional and international airports, primarily Venice Marco Polo Airport (VCE) and Treviso Airport (TSF), with additional access via Verona Villafranca Airport (VRN) and Bolzano Airport (BZO). These airports offer domestic and international flights and are connected to Cortina through a combination of coach services, buses, and taxi transfers. Together, this air-and-road transport system enables access to Cortina while supporting an Olympic mobility strategy focused on reduced congestion and sustainable travel.17

Rasun-Anterselva

Crime and Public Safety

While Rasun-Anterselva has a low crime rate compared to major Italian cities, government crime statistics for this remote area of Italy are generally sparse, not publicly available, or are published in Italian. Most open-source reporting on crime in the area is limited to travel sites and tourist blogs; ZeroFox cannot confirm the accuracy and reliability of the information from these sources. According to available data, Rasun-Anterselva and the surrounding South Tyrol province report exceptionally low crime rates, consistently ranking as some of the safest areas in Italy.18,19 Violent crime is extremely rare, with the area’s safety profile defined by its rural, community-oriented nature. Primary public safety concerns are environmental rather than criminal, focusing on mountain road safety, skiing accidents, and avalanche prevention. During large-scale events, security is managed by specialized mountain units of the Carabinieri and the Alpine Rescue service to ensure the safety of international visitors.20 

Public and Air Transportation

The Antholz Valley is a remote mountain destination, making a reinforced public transport network the primary method for visitor arrival. During the 2026 Winter Games, private vehicle access to the valley is strictly regulated through Olympic “Limited Traffic Zones" requiring special permits for entry.21

International travelers typically arrive via the Innsbruck (INN), Venice (VCE), or Munich (MUC) airports. In contrast, the nearest regional airport, Bolzano (BZO), handles limited commercial flights. From there, spectators are encouraged to take the Pusteria Valley train to Valdaora-Anterselva (Olang) station, where a high-frequency network of dedicated Olympic shuttle buses provides direct, 20-minute service to the Anterselva Biathlon Arena.22

Livigno

Crime and Public Safety

While Livingo has a low crime rate compared to major Italian cities, government crime statistics for this remote area of Italy are generally sparse, not publicly available, or in Italian. Most open-source reporting on crime in the area is limited to travel sites and tourist blogs; ZeroFox cannot confirm the accuracy and reliability of the information from these sources. According to available data, crime in Livigno, Italy, is considered very low, and incidents affecting tourists are rare.23,24,25 The police presence is constant, and individuals are more likely to be cited for traffic violations than to become victims of petty crimes.26

Public and Air Transportation

Livigno is accessible via several regional airports, including Bolzano (BZO), Innsbruck (INN), Milano Bergamo (BGY), Milano Linate (LIN), Zurich-Kloten (ZRH), and Milano Malpensa (MXP).27 During the 2026 Winter Games, private vehicle access will be restricted due to Olympic Limited Traffic Zones, so spectators are encouraged to use designated Park & Ride areas, shuttle services, or public transport.

Predazzo

Crime and Public Safety

While crime in Predazzo, Italy, is considered very low, and incidents affecting tourists are rare, available crime statistics and tracking data is for the Trentino region rather than the town itself.28 Notably, Predazzo, Italy, is home to the Guardia di Finanza (financial police) alpine school.29 Visitors should exercise caution as they would generally in Italy, as crime in the area is very likely on par with that of other small, ski-centric tourist areas.

Public and Air Transportation

Predazzo is accessible from several regional and international airports. The closest airport is Bolzano (BZO), followed by Innsbruck (INN), Verona (VRN), Venice Marco Polo (VCE), Milan Bergamo (BGY), and Milan Linate (LIN). On competition days, venue gates open between 2.5 and three hours before events begin, and spectators are strongly encouraged to arrive roughly three hours early to allow sufficient time for transport and security checks. Accessibility services are available for spectators with disabilities or reduced mobility, with dedicated guidance provided by event organizers.30

Spectators are encouraged to use organized transport options. Park & Ride facilities are available in Moena, Predazzo, Masi, and Molina, with paid, advance-booked parking and shuttle service to the Predazzo Spectator Bus Terminal, a short walk from the venue. Train & Ride services operate via Ora Auer station with shuttle connections. In contrast, free local bus services will run throughout Val di Fiemme and Val di Fassa during the Games.31

Bormio

Crime and Public Safety

While Bormio has a low crime rate compared to major Italian cities, government crime statistics for this remote area of Italy are generally sparse, not publicly available, or published in Italian. Most open-source reporting on crime in the area is limited to travel sites and tourist blogs; ZeroFox cannot confirm the accuracy and reliability of the information from these sources. According to available data, Bormio is a small ski town known for its relatively low crime rate. However, pickpocketing and other petty thefts are common security concerns, especially in busy resort areas.32 As a major ski destination, the town has a heightened security presence, including abundant security cameras. Additionally, Bormio is well-equipped to handle serious injuries and fatalities that can occur on its challenging slopes and in extreme sports, with support from an experienced local rescue and emergency response service.33

Bormio Public and Air Transportation

Bormio is accessible via several regional and international airports, including Milan Bergamo (BGY), Bolzano (BZO), Milan Linate (LIN), Milan Malpensa (MXP), and Innsbruck (INN). The recommended method of travel to the area is by train, with hourly services running from Milano Centrale to Tirano that take about 2.5 hours. From Tirano, visitors can take a bus or taxi for a 35-minute transfer to Bormio.34,35,36

During the 2026 Winter Games, access by private vehicles will be restricted within the Olympic Limited Traffic Zones. Spectators will need to rely on organized transport services. On competition days, train services to Tirano will be extended, and Train & Ride shuttle buses will be available exclusively for ticket holders, connecting Tirano station to the Bormio Spectator Bus Terminal. This terminal is located approximately one mile from the Stelvio Ski Centre.37

For those arriving by car, access will be limited to the Aquilone Park & Ride area in Valdisotto. Parking will be free, but shuttle service to the Bormio Spectator Bus Terminal will operate only on competition days. Both parking and shuttle services must be booked in advance through a single reservation process.38

Local public transport will also be available for visitors staying in neighboring cities Alta and Media Valtellina. Enhanced bus services will run every 30 to 60 minutes on key routes, including Bormio–Tirano, Bormio–Livigno, and Bormio–Santa Caterina.

Tesero

Crime and Public Safety

While crime in Tesero, Italy, is considered very low, and incidents affecting tourists are rare, available crime statistics and tracking data is for the Trentino region rather than for the town itself.39 Visitors should exercise caution as they would generally in Italy, as crime in the area is very likely on par with that of other small, ski-centric tourist areas.

Public and Air Transportation

Tesero is accessible via several regional airports, including Bolzano (BZO), Innsbruck (INN), Verona (VRN), Venice (VCE), Milano Bergamo (BGY), and Milano Linate (LIN). Vehicle access to the Tesero Cross-Country Skiing Stadium is managed via Park & Ride areas at Vivaio, Masi, Molina, Predazzo, and Moena, with shuttles or short walks (0.4–0.6 miles) to the venue. Train travelers can use the Ora/Auer station and a shuttle to the Tesero Spectator Bus Terminal, and then take a 10-minute walk to the venue. Local public transport lines in Val di Fiemme and Val di Fassa will operate free of charge during the Games, with enhanced shuttle connections to the stadium.40

Verona

Crime and Public Safety

While Verona has a lower than average crime rate compared to major Italian cities, government crime statistics for this remote area of Italy are generally sparse, not publicly available, or published in Italian. Most open-source reporting on crime in the area is limited to travel sites and tourist blogs; ZeroFox cannot confirm the accuracy and reliability of the information from these sources. Available online data from 2023 shows Verona has crime rates in line with or below Italian averages, with very low instances of violent crime (e.g. assaults, robberies)—especially against tourists.41 However, online crime reports show that the city of Verona has low levels of crime that have been steadily increasing within the past three years.42 Tourists should remain vigilant to avoid being victimized by local taxi scams, price-gouging scams, and camera scams in which locals ask visitors to take their pictures and then demand payment for breaking their cameras. The primary issue is petty theft—particularly pickpocketing in crowded spots such as Piazza Bra, The Arena, Juliet's House, and Porta Nuova train station.43

Public and Air Transportation

Verona’s public transport system is mainly based on buses operated by ATV (Azienda Trasporti Verona), as the city does not have a metro or tram network. Buses connect the main train station, the historic center, and residential areas, making it easy to get around the city. 

Services generally run from early morning (5:00–5:30 AM) until late night (11:00 PM), with good frequency (it varies between 10 to 20 minutes in peak hours) on major routes and reduced service at night.44 The current public transit system supports efficient movement across the city for residents, visitors, and large-scale event attendees. During the Games, parking availability near the venues will be extremely limited, making public transportation the encouraged method of travel to the events.45

Verona Valerio Catullo Airport (VRN) is the main airport serving Verona and the surrounding region. It is located in Villafranca, which is about nine to 10 km southwest of Verona’s city centre and has ground transport connections via bus and taxi, enabling convenient access to Verona.46

Cyber Threats

Cybercriminals and state-sponsored actors have targeted international sporting events in recent years, and the 2026 Olympic Games are not expected to be an exception. Hacker groups and threat actors will likely attempt to access sensitive data, disrupt infrastructure, or conduct phishing and scams. There is a roughly even chance that Russian-backed cybercriminals will target Italian national interests due to Italy’s overt support for Ukraine.47 Due to the large number of people in attendance (particularly celebrities, politicians, and business leaders), Games events become targets for threat actors seeking strategic intelligence. Additionally, the massive concentration of systems, money, and data—combined with the critical infrastructure supporting the Games—offers numerous opportunities for disruption and extortion by threat actors seeking profits or to make a statement, especially considering the current divisive geopolitical climate.48

  • During the 2024 Summer Olympics in Paris, there was a spike in distributed denial-of-service (DDoS) attempts, Olympics-themed phishing attacks, and scam traffic.
  • During the 2020 Summer Olympics in Tokyo (which took place from July–August 2021), Russian threat actors attempted to sabotage pre-Games activities.
  • During the PyeongChang 2018 Olympic Winter Games, WiFi and other digital infrastructure were disrupted.49

Impersonations

ZeroFox identified accounts that appear to be impersonating official 2026 Winter Olympics social media pages. While these impersonation accounts present no current security threats, they are likely to be used in scams closer to the event dates, such as for the sale of fraudulent tickets.

Deep and Dark Web Threats

ZeroFox did not identify any evidence of active or coordinated threats on the DDW targeting the 2026 Winter Olympic Games. However, we identified three categories of threats that pose a passive risk:

  • Botnet logs advertised to contain sensitive data collected from compromised machines belonging to individuals associated with Olympic organizations and events
  • Compromised URL:login:password (ULP) and login:password (LP) credential sets related to the 2026 Winter Olympics aggregated and exported from multiple sources
  • Suspicious domains impersonating legitimate sites used by or associated with the 2026 Winter Olympics

Compromised User and Employee Account Credentials

ZeroFox identified 89 compromised credentials in ULP and LP formats and related data affecting Milano Cortina 2026 login pages, web resources, and associated email addresses.

The compromised records were collected by threat actors between April 8, 2024, and January 22, 2025, from various private-access Telegram channels that function as repositories for stolen data. ZeroFox assesses that these credentials originated from full botnet log data sets, which were later parsed and reduced to plaintext entries containing a username or email address and the corresponding password associated with a specific URL.

Although basic deduplication was performed, the data set continues to include similar entries that differ only by the web resources accessed by the impacted users.

Infostealer Logs Affecting Domains Using “milanocortina2026” 

ZeroFox located 16 logs containing login data—including credentials and, in some cases, session cookies—for “milanocortina2026” domains listed for sale on the vetted, automated infostealer and botnet log marketplace Russian Market. The most recent snapshots of infected machines accessing “milanocortina2026”-related assets are dated October 29, 2025, while the oldest date back to September 14, 2024.

Overall, the limited volume of affected assets suggests a low risk of account takeover attempts (including those facilitated by compromised session cookies) as well as credential stuffing attacks, phishing or spamming campaigns, and other opportunistic activities that adversaries could pursue following the successful compromise of “milanocortina2026” digital assets.

Recently Registered Suspicious Domains

Between June 2024 and November 2025, ZeroFox identified seven domains potentially associated with malicious activity targeting Milano Cortina 2026. These domains were filtered from WhoisDS repositories, which track thousands of newly registered domains each month.

Of the seven domains identified, six were inactive at the time of reporting, while one displayed a login panel.

  • milanocortinaolympicradio[.]com – Registered on November 25, 2025
  • olimpiadimilanocortina2026[.]net – Registered on August 3, 2025; Returns login screen
  • milanocortina2026[.]xyz – Registered on July 26, 2025
  • milanocortina2026magazine[.]net – Registered on May 3, 2025
  • milanocortina2026[.]channel – Registered on February 14, 2025
  • olimpiadimilanocortina2026[.]info - Registered on July 1, 2024
  • olympicgamesmilano[.]com – Registered on February 8, 2024

These sites could be leveraged for phishing, credential theft, or other fraudulent activity.

  • ZeroFox assesses that the registration of multiple domains closely resembling official Milano Cortina 2026 branding likely represents preparatory activity for cyber-enabled fraud or social engineering operations targeting Olympic partners or affiliated stakeholders. The identified domains demonstrate clear thematic alignment with high-interest Olympic events, leveraging geographic, linguistic, and branding elements commonly abused in phishing and impersonation campaigns. Such domains are frequently registered well in advance of active use to evade detection, age the domain to improve legitimacy, or await alignment with operational timelines such as major announcements, athlete selection milestones, or event-related communications. Given the volume and naming conventions of the domains, this activity is unlikely to be coincidental, particularly when viewed in the context of increased targeting of sporting organizations and international events by financially motivated cybercriminals.
  • While six of the seven domains were inactive at the time of reporting, this does not meaningfully reduce risk. Dormant infrastructure is a well-established tactic used by threat actors to maintain operational flexibility while minimizing early detection. The presence of one domain presenting a login panel increases concern, as this suggests potential credential harvesting functionality or staging infrastructure already in place.
  • Threat actors can leverage Olympic-themed domains to exploit trust, urgency, and public interest—especially during ticketing, accreditation, broadcasting, and sponsorship cycles.

At present, there are no indications of destructive or disruptive cyber intent; however, there is a roughly even chance these domains will be leveraged as initial access points or trust-building infrastructure within broader malicious campaigns. The overall potential impact is assessed as moderate, with the risk escalating to high if compromised credentials are used to enable lateral access or facilitate executive impersonation. ZeroFox recommends continued monitoring, proactive blocking, and brand abuse mitigation to reduce the likelihood of successful exploitation.

Accommodations and Ticketing Overview

The Olympic Winter Games Milano Cortina 2026 offers several official packages for ticket purchases, some of which do include accommodation add-ons as an option.50 Additional accommodations are available in each city by way of resorts, hotels, hostels, Airbnb bookings, and various other rental lodging but are anticipated to sell out quickly. Airbnb is an official sponsor of the Olympics and is listed front-and-center as a promoted accommodations option on the official website of the 2026 Winter Olympics.51

Tickets are currently available for purchase through the 2026 Winter Olympics website and via the official Tickets MilanoCortina2026 app. Options to resell tickets were set to open on these sites by the end of December 2025. Whether purchased directly from the Olympics website or via resellers, attendees will need to secure their tickets through the mandatory ticketing app, which became available in December 2025. 

The official Tickets MilanoCortina2026app, available on the App Store and Google Play, is the only way to access all competition venues and the Olympic and Paralympic Opening and Closing Ceremonies, as printed tickets are not accepted.52,53 The app allows users to view and manage tickets linked to their account; enter venues using a secure QR code generated 24 hours before each session; and change ticket names, transfer tickets to others, or resell them if unable to attend. Counterfeit tickets have historically been a problem at major events, so spectators are strongly encouraged to purchase tickets only through the official app to ensure entry and protect the integrity of the Games.54,55

Accommodation-Related Scams

ZeroFox identified a Facebook post advertising Olympic accommodations using only social media and WhatsApp contacts, with no verified booking platform or official listing. Such listings do not offer independent verification, reviews, or secure payment methods and are commonly used in accommodation scams around major sporting events to target visitors under time constraints, making this listing potentially misleading or unsafe.

Ticket Scams

Tickets for the 2026 Winter Olympics are available only though the Milano Cortina 2026 Olympics website. Additionally, ticket re-sellers and brokers are not authorized to sell tickets, and it is illegal to sell tickets above face value in Italy, so any tickets that are for sale elsewhere outside of the official website are very likely scams. ZeroFox observed two websites selling supposed Winter Olympics tickets, despite not being authorized sellers, and advises buyers to be cautious and only purchase tickets via Milano Cortina 2026 Olympics website.

ZeroFox identified a Reddit post in which the user asked for advice on how to get a refund from Hellotickets, having bought tickets and later realizing the site might not be legitimate. Hellotickets is not an official ticketing platform, and caution is advised when purchasing tickets from any site other than the Milano Cortina 2026 Olympics website.

ZeroFox Intelligence Recommendations

  • There is a roughly even chance of social unrest during the Olympic Games linked to recent patterns of frequent, highly disruptive protests and strikes in Italy that impact transportation and public life and occasionally escalate into tensions in key urban areas. Visitors should plan their journeys well in advance and monitor local media to identify protests ahead of time.
  • Understand the different security requirements when traveling.
  • Those with event tickets or traveling to fan zones should download the official Olympic Games 2026 mobile application. All tickets, any transportation passes, and any other required passes for accommodations or travel should be downloaded and stored in the official app well in advance of the Games.
  • Proactively monitor for compromised accounts being brokered on DDW forums.
  • Olympic visitors should be vigilant for potential scams, including cyber scams involving fake mobile, accommodation, and Olympic apps. 
  • Ensure accommodation and train reservations are made ahead of time in order to avoid the risk of not being able to secure bookings closer to the event. Book all accommodation and travel through legitimate apps or websites and not through third parties. 
  • Keep personal belongings somewhere that they cannot be easily pickpocketed, especially on public transportation and at fan zones.
  • Remain in a group when traveling, especially after dark.

Scope Note

ZeroFox Intelligence is derived from a variety of sources, including—but not limited to—curated open-source accesses, vetted social media, proprietary data sources, and direct access to threat actors and groups through covert communication channels. Information relied upon to complete any report cannot always be independently verified. As such, ZeroFox applies rigorous analytic standards and tradecraft in accordance with best practices and includes caveat language and source citations to clearly identify the veracity of our Intelligence reporting and substantiate our assessments and recommendations. All sources used in this particular Intelligence product were identified prior to 11:30 AM (EST) on January 27, 2026; per cyber hygiene best practices, caution is advised when clicking on any third-party links.

ZeroFox Intelligence Probability Scale 

All ZeroFox intelligence products leverage probabilistic assessment language in analytic judgments. Qualitative statements used in these judgments refer to associated probability ranges, which state the likelihood of occurrence of an event or development. Ranges are used to avoid a false impression of accuracy. This scale is a standard that aligns with how readers should interpret such terms.


  1. hXXps://www.olympics[.]com/en/milano-cortina-2026
  2. hXXps://www.olympics[.]com/en/milano-cortina-2026/venues
  3. hXXps://www.olympics[.]com/en/milano-cortina-2026
  4. hXXps://www.olympics[.]com/en/milano-cortina-2026/schedule/overview
  5. Ibid.
  6. hXXps://www.crisis24[.]com/articles/italian-authorities-to-implement-heightened-security-for-winter-olympics-through-february-2026
  7. hXXps://travel.state[.]gov/en/international-travel/travel-advisories/italy.html
  8. hXXps://www.osvnews[.]com/italian-police-foil-attempted-attack-on-catholic-festival-turkish-suspects-arrested/
  9. hXXps://www.ansa[.]it/english/news/general_news/2025/10/03/general-strike-protests-for-flotilla-all-over-italy_84af9bd4-b008-498a-9bcf-6c70de8ae79a.html
  10. hXXps://apnews[.]com/article/italy-strike-unions-meloni-government-labor-22df9d003d1aac52e2d8a83f4f7cf995
  11. hXXps://lespresso[.]it/c/politica/2026/1/27/ice-milano-cortina-conferma-italia-vance/59479
  12. hXXps://explorecity[.]life/italy/cortina-dampezzo/crime-pollution
  13. hXXps://maltasport[.]mt/2026-winter-olympic-games/two-arrested-in-milano-cortina-corruption/
  14.  hXXps://www.atvo[.]it/en-venezia-cortina.html
  15. hXXps://cortinadampezzo[.]it/en/news-en/2026-olympic-games-road-access-and-traffic-restrictions-in-the-host-areas/
  16. hXXps://www.straitstimes[.]com/sport/transport-fears-force-cap-on-ticket-sales-for-events-in-italys-cortina
  17. hXXps://www.travelmath[.]com/nearest-airport/Cortina+d'Ampezzo,+Italy
  18. hXXps://www.istat[.]it/wp-content/uploads/2024/11/7.pdf
  19. hXXps://www.italyhousehunting[.]com/p/trentino-south-tyrol.html
  20. hXXps://lynxtrails[.]com/mountain-rescue-in-italy/
  21. hXXps://www.olympics[.]com/en/milano-cortina-2026/spectators/anterselva-antholz/anterselva-residents
  22. hXXps://www.antholzertal[.]com/en/discover/arrival-mobility
  23. hXXps://travelladies[.]app/safety/italy/livigno
  24. hXXps://en.tripmydream[.]com/italy/livigno/security
  25. hXXps://travelladies[.]app/safety/italy/livigno
  26. hXXps://urbanaccessregulations[.]eu/countries-mainmenu-147/italy-mainmenu-81/lombardia/livigno-ztl
  27. hXXps://www.olympics[.]com/en/milano-cortina-2026/spectators/livigno/livigno-aerials-moguls-park#getting-to-the-venue
  28. hXXps://www.statista[.]com/statistics/664040/top-provinces-for-crime-rate-italy/
  29. hXXps://www.dolomitimountains[.]com/predazzo.html
  30. hXXps://www.olympics[.]com/en/milano-cortina-2026/spectators/predazzo/predazzo-ski-jumping-stadium#getting-to-the-venue
  31. Ibid.
  32. hXXps://travelladies[.]app/safety/italy/bormio
  33. hXXps://en.tripmydream[.]com/italy/bormio/security
  34. hXXps://www.olympics[.]com/en/milano-cortina-2026/spectators/bormio/stelvio-ski-centre#getting-to-the-venue
  35. hXXps://www.powderhounds[.]com/Europe/Italy/Bormio.aspx
  36. hXXps://www.bormioski[.]eu/estate
  37. hXXps://www.olympics[.]com/en/milano-cortina-2026/spectators/bormio/stelvio-ski-centre#getting-to-the-venues
  38. Ibid.
  39. hXXps://www.statista[.]com/statistics/664040/top-provinces-for-crime-rate-italy/
  40. hXXps://www.olympics[.]com/en/milano-cortina-2026/spectators/tesero/tesero-cross-country-skiing-stadium
  41. hXXps://expiter[.]com/province/verona/crime-and-safety/
  42. hXXps://theworldtravelindex[.]com/en/europe/italy/verona/is-verona-safe?
  43. hXXps://www.travelsafe-abroad[.]com/italy/verona/
  44. hXXps://www.atv.verona[.]it/routes-and-timetables.
  45. hXXps://www.olympics[.]com/en/milano-cortina-2026/spectators/verona/verona-olympic-arena.
  46. Ibid.
  47. hXXps://www.crisis24[.]com/articles/italian-authorities-to-implement-heightened-security-for-winter-olympics-through-february-2026
  48. hXXps://www.darkreading[.]com/remote-workforce/winter-olympics-podium-cyberattackers
  49. hXXps://www.paloaltonetworks[.]com/resources/research/unit-42-cyber-vigilance-program/2026-winter-games-milano-cortina
  50. hXXps://hospitality.milanocortina2026[.]org/en/products?groupSize=2&builderTab=1
  51. hXXps://www.olympics[.]com/en/milano-cortina-2026
  52. hXXps://www.usopc[.]org/event-ticket-info
  53. hXXps://www.forbes[.]com/sites/blythelawrence/2025/11/29/how-to-buy-tickets-for-the-2026-winter-olympics-in-italy/
  54. hXXps://www.olympics[.]com/en/news/free-ticket-scam-for-the-opening-ceremony-of-the-paris-2024-paralympic-games
  55. hXXps://www.proofpoint[.]com/us/blog/threat-insight/security-brief-scammers-create-fraudulent-olympics-ticketing-websites

Tags: Threat Intelligence

See ZeroFox in action