Order-tracking app Shop abused to push callback phishing attacks
… The threat actor also listed a phone number in the digital receipts that users can call to dispute purchases. …
… The threat actor also listed a phone number in the digital receipts that users can call to dispute purchases. …
…The communications from the threat actor demanded payment in exchange for not publicly disclosing this information," iRhythm said. "Since receipt of the communications, the Company has confirmed that certain data was exfiltrated…