TLDR Tech / InfoSec
Suspicious Polyfill login prompts pop up on Toshiba, Muji websites
The polyfill[.]io domain, hijacked by a Chinese entity in 2024 and abandoned by site owners who never removed embedded script references, reactivated in late May and began returning HTTP 401 responses that surfaced as browser-native credential prompts on Toshiba, Muji, Zojirushi, FiNC Technologies, Ishiyaku Publishers, Hobonichi, and Samsung Smart TV sites.
Read the full story