[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

confirmed (vendor)

WASABI SWITCH (Japan EC ops platform): order data leaked; refund-phishing emails used real order details

WASABI Inc. published a first report Oct 16 for WASABI SWITCH (formerly World Switch), a reuse/EC operations platform used by merchant stores. After stores reported buyers receiving suspicious emails with real order details that pushed "refund" contact via LINE, investigation confirmed unauthorized access on Oct 14 with order information leaked externally; malware on the system was removed and the ingress path blocked. A separate unauthorized-access event around 04:00 on Oct 16 (different cause) was also confirmed, with the path identified and remediation underway. Full leak scope still under investigation with an external cyber firm; a November release is planned to encrypt stored API credentials. Buyers and merchants should ignore refund/LINE solicitations even when order fields match and verify only through the original store or marketplace support channel.

Sources: WASABI SWITCH first report (Oct 16)