Security Feed
  1. Archives

Jun 25 2026 Order-tracking app Shop abused to push callback phishing attacks

Source

Threat actors are increasingly abusing Shop, the order-tracking app from Shopify, by adding fake purchase receipts in users' order histories to trick them into providing sensitive data or installing remote access software. [...]

Posted by Bill Toulas on Thu 25 June 2026 in BleepingComputer.

Tags: Security, Mobile.

Categories

  1. Ars Technica
  2. AWS Security
  3. BleepingComputer
  4. Brian Krebs
  5. Bruce Schneier
  6. GCP Security
  7. Google Project Zero
  8. The Daily Swig
  9. The Guardian
  10. The Register
  11. Threatpost

Tag cloud

  • Security
  • Uncategorized
  • Security, Identity, & Compliance
  • Microsoft
  • Security Blog
  • Biz & IT
  • AI
  • Security & Identity
  • CryptoCurrency
  • Google
  • Announcements
  • Artificial Intelligence
  • Foundational (100)
  • Legal
  • A Little Sunshine
  • privacy
  • Apple
  • Mobile
  • squid
  • Intermediate (200)
  • hacking
  • LLM
  • Technical How-to
  • Advanced (300)
  • vulnerabilities

Security Feed. Powered by Pelican and m.css. Code is available on GitLab.