According to cybersecurity firm Kaspersky Lab, scammers have been active since early 2015.
As well as fake tickets, they are also thought to be distributing malware-ridden emails and phishing attacks.
"According to our research, the creation of fake sites usually involves well organised, fraudulent, international gangs," said Andrey Kostin, senior web content analyst at Kaspersky Lab.
"They split tasks, so that each small group is responsible for a separate part of the work.
