The Gig Workers For Target's Delivery App Hate Their Algorithmically-Determined Pay

In 2017 Target bought a same-day home-delivery company called Shipt for $550 million. Shipt now services half of Target's stores, reports Motherboard, and employs more than 100,000 gig workers.
Unfortunately, they're working for a company that "has a track record of censoring and retaliating against workers for asking basic questions about their working conditions or expressing dissent," reports Motherboard. For example, an hour after tweeting about how there was now much more competition for assignments, one Seattle gig worker found their account suddenly "deactivated" — the equivalent of being fired — and also received an email saying they were no longer "eligible to reapply".
"They stamp out resistance by flooding the market with new workers..." complained one Shipt worker, "and they're actively monitoring all the social media groups. "
On its official national Facebook group, known as the Shipt Shopper Lounge, which has more than 100,000 members, Shipt moderators selected by the company frequently censor and remove posts, turn off comments sections, and ban workers who speak out about their working conditions, according to screenshots, interviews, and other documentation provided to Motherboard. The same is true on local Facebook groups, which Shipt also monitors closely, according to workers. Motherboard spoke to seven current Shipt workers, each of whom described a culture of retaliation, fear, and censorship online...

Because Shipt classifies its workers as contractors, not employees, workers pay for all of their expenses — including gas, wear and tear on their cars, and accidents — out of pocket. They say the tips on large orders from Target, sometimes with hundreds of items, can be meager. Workers say Shipt customers often live in gated and upscale communities and that the app encourages workers to tack on gifts like thank you cards, hot cocoa, flowers, and balloons onto orders (paid for out of their own pocket) and to offer to walk customer's dogs and take out their trash, as a courtesy. Shipt calls this kind of service "Bringing the Magic," which can improve workers' ratings from customers that factor into the algorithm that determines who gets offered the most lucrative orders...
Unfortunately, that new algorithm (which began rolling out last year) is opaque to the workers affected by it — though Gizmodo reported pay appears to be at least 28% lower. And Motherboard heard even higher estimates:
"Our best estimate is that payouts are now 30 percent less, and up to 50 percent on orders," one Shipt worker in Kalamazoo with two years under her belt, who wished to remain anonymous for fear of retaliation, told Motherboard. "I fluctuate between extreme anger and despair. It's been three weeks since this has been implemented, and one of my good friends told me that she's down the equivalent of a car payment."
Another Shipt worker in Palm Springs, California provided Motherboard with receipts for a 181-item order that included six Snapple cases, five La Croix cases, and 12 packs of soda. They had to wheel three shopping carts out of a Ralph's grocery store and deliver them -- and earned $12.68 for the job. The customer did not tip. (Under the older, more transparent pay model, they would have earned $44.19.) "That's a real slap in the face," they told Motherboard.

Read more of this story at Slashdot.

SecRule REQUEST_URI "@rx ..." "id:1001,phase:1,deny,status:403"

find /var/www -type f -name "*.php" -mmin -120

ss -tunp | grep -E ":(4444|1337|8080|9001)"

apt update && apt --only-upgrade install <pkg>

title: Detect Exploitation - The Gig Workers For Target's Delivery App Hate Their Algorithmically-Determined Pay
id: 97e22d06-5205-422f-a5db-cb1f0cc57453
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-27
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access

rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-27"
        description = "YARA Signature for "
    strings:
        $str = "The Gig Workers For Target\'s D" ascii wide
    condition:
        any of them
}

index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("The Gig Workers For Targets Delivery App")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count

message: "*The Gig Workers For Targets Delivery App*"

CommonSecurityLog
| where Message has "The Gig Workers For Targets Delivery App"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc