Summary
Security researchers at Huntress have uncovered a sophisticated fake refund scam targeting Shopify users, where scammers hijack real Shopify notifications to trick victims into sending them money. The attackers create fake orders and embed contact details in shipping addresses, prompting victims to call and unknowingly return funds to the scammers.