That Norton Receipt in Your Shop App Is a Trap

Attackers are abusing Shopify's Shop order-tracking app by inserting fake purchase receipts that impersonate brands like Norton, McAfee, Apple, and…

The new trick hiding inside an app you already trust

Threat actors are abusing Shop, the order-tracking app from Shopify, by quietly inserting fake purchase receipts into users order histories.

How big is the exposure?

Bigger than you might think.

Why this beats the email scam it replaces

This tactic is a twist on something security teams already know well: callback phishing.

What the scammer actually wants once you call

The receipt is just the bait.

Get the full story

Read the complete breakdown, fixes and what happens next.