Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order histories to trick them into providing sensitive data or installing remote access software. [...]
Order-tracking app Shop abused to push callback phishing attacks
Résumé + lien vers la source. Sans paywall, sans tracking.