Threat Intelligence4 min read
Shop App Abused to Deliver Fake Receipts in Callback Phishing
Scammers insert fake Norton, McAfee, and PayPal invoices into Shopify's Shop order-tracking app, then social engineer victims into installing remote access tools. Here's how it works.
Alex KowalskiJun 26, 2026