Brangista Solution: suspicious EC Tencho program; fake refund messages use actual order details

Customers of some merchants received fake refund messages containing actual order details and directing them to LINE accounts. Reports concern Yahoo! Shopping and Qoo10 orders. Investigation found a suspicious order-lookup script and related files on EC Tencho servers. Names, addresses and products may have leaked; payment data was not held. [1]

Suspicious files were isolated to preserve evidence while unauthorized access, its route, order-data access and impact are investigated. Merchant names, counts and the incident period are not disclosed. The notice does not establish compromise of the marketplaces themselves or actual financial loss. [1]