Over 4,300 fake FIFA domains, banking malware in streaming apps, and stolen logins are already targeting World Cup 2026 fans, with the FBI and researchers warning of billions in potential losses.