Suspicious Login Windows Detected on Toshiba and Muji Websites

Toshiba and Muji have issued warnings to visitors of their websites following the discovery of suspicious pop-up windows mimicking the login process. These windows could be used by attackers to harvest user logins and passwords.

The incident affected the official websites of both companies, causing concern among customers and cybersecurity experts. Representatives from Toshiba and Muji did not specify how the attackers injected the malicious code but confirmed that an investigation is underway.

Such attacks are often linked to vulnerabilities in third-party scripts or services integrated into websites. In this case, the compromise may involve Polyfill—a popular tool for ensuring web application compatibility with outdated browsers. Experts recommend users refrain from entering credentials in unexpected windows and stay updated with announcements from the companies.