Multiple Threats on Legit Business Website

DBBRIGDE

IK Multimedia is a software and hardware business selling music plug ins and physical devices. Their page brings up multiple threat warnings linked to shopify which handles payment transactions and access to customer purchases and licensing.

Are these threats legitimate or is there something lurking on their page?

https://ikmultimedia.com/en-us?country=US

BD Sus warning.png

Bonfire9911

Neither IK Multimedia nor its Shopify domain (pdvp…) is currently flagged by VirusTotal.

There were phishing attacks on some legitimate Shopify storefronts in October. It’s unclear whether IK Multimedia was affected.

• https://www.fudge.ai/blog/shopify-checkout-phishing-attack/
• https://romanzipp.com/blog/shopify-hit-with-phishing-attack

Although those incidents appear to have been contained, and BD’s warning could be valid, a leftover or a false positive (only BD can say for sure), I’d be cautious about any Shopify store that BD flags. I'd watch the checkout process closely for redirects to other domains, and consider using a reversible payment method that wasn’t affected (only credit cards were affected).