Toshiba and Muji Warn Users of Suspicious Login Prompts from Polyfill Service
Suspicious Polyfill login prompts pop up on Toshiba, Muji websites

Image: Bleepingcomputer
Toshiba and Muji have alerted users about suspicious login prompts appearing on their websites, potentially aimed at collecting user credentials. Both companies advise users to change their passwords if they entered any information. The issue stems from the polyfill[.]io service, which was compromised in 2024.
- 01The suspicious login prompts were linked to the polyfill[.]io service, which was compromised in 2024.
- 02Toshiba and Muji have advised users to change their passwords if they entered credentials on the rogue screens.
- 03The issue affected multiple companies, including Zojirushi and FiNC Technologies.
- 04Polyfill is a JavaScript CDN that provides compatibility for legacy browsers.
- 05The domain polyfill[.]io was purchased by a Chinese entity, leading to the introduction of malicious scripts.
Advertisement
In-Article Ad
Toshiba and Muji have issued warnings to their website visitors regarding suspicious login prompts that may collect user credentials. These pop-ups originated from the polyfill[.]io service, which was compromised in 2024 when the domain was acquired by a Chinese entity that introduced malicious code. Both companies have advised users who may have entered their login details to change their passwords. While there is currently no evidence of unauthorized access or data leakage, the companies are taking precautions to ensure user safety. Other companies, such as Zojirushi and FiNC Technologies, have also been affected by this issue. Security researcher Pasquale Pillitteri noted that the polyfill service, originally designed for legacy browser support, has been misused, leading to unexpected authentication prompts on various websites. Although the polyfill[.]io service has been deactivated, remnants of its code remain on some sites, causing these login prompts to appear. Users are urged to remain vigilant and cautious about unexpected authentication requests.
Advertisement
In-Article Ad
The incident raises concerns about online security for users of Toshiba, Muji, and other affected companies.
Advertisement
In-Article Ad
Reader Poll
Have you ever encountered suspicious login prompts while browsing?
Connecting to poll...
More about Toshiba
Read the original article
Visit the source for the complete story.





