callback phishing attacks

Threat actors are exploiting Shop, an order-tracking app from Shopify, by inserting fake purchase receipts into users' order histories to deceive them into divulging sensitive information or installing remote access software.