SHOPIFY'S SHOP APP WEAPONIZED FOR PHISHING

Threat actors are exploiting Shopify's Shop order-tracking app by injecting fake purchase receipts into user accounts. The attacks trick victims into revealing sensitive data or installing remote access malware.