Only Shopify detected the exploitation activity across the whole campaign

Assessment

This is Hacktron's own account, stated in passing in their blog post: "we are not aware of any company that detected the activity except Shopify, even after thousands of images were sent and their image processors repeatedly crashed." It is a negative claim (nobody else noticed) made by the party doing the exploiting, about targets that have not themselves confirmed or denied it, across a campaign whose full target list Hacktron has not fully documented.