CYBER CODE RED

Get real-time updates on Telegram

Shopify tells Australian store to stay shut after hijacked extensions divert shoppers

WAGD, an Australian dog harness retailer, remains closed on Shopify's advice days after malicious code redirected a shopper to a fake checkout page. Logbase, maker of the Selleasy upsell app, confirmed an unauthorised party accessed an internal tool and added a malicious script affecting a number of stores. HulkApps disclosed a similar compromise in which a function named "hijack" intercepted checkout clicks and sent shoppers to lookalike payment domains.

Published 17-Oct-2026 22:26 UTC · First seen 17-Oct-2026 22:23 UTC

Sources