Invoice Phishing Attacks Are Abusing the Shop App

Researchers at Gen Digital warn that threat actors are abusing Shopify's Shop app to generate fraudulent in-app notifications—fake invoices and order alerts impersonating brands such as Norton, McAfee, Apple and PayPal—to trick users into calling scam phone numbers; using a trusted shopping/order-tracking app makes these phishing messages feel more legitimate and more difficult for security products to detect.