Skip to content

ASOS app users receive push notifications from hackers

techOct 6, 20263867

Dozens of UK ASOS app users reported receiving an unexpected pop-up on their phones that contained an apparent extortion message reading, "Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it." The message included a link to a newly created Telegram channel calling itself Xuanye Group; the group posted three times, the latest about ASOS. ASOS did not immediately respond to BBC requests for comment and it is not known whether ASOS uses Snowflake or what data, if any, might be stored there. Charlotte Wilson, head of enterprise at Check Point, said the incident would be deeply serious if confirmed because attackers turned ASOS's own app into their ransom note. Dan Bird of Horizon3 noted that sending push notifications requires access to the company's notification system, suggesting the criminals may have obtained credentials that grant access to multiple systems. The public, app-delivered demand is unusual because most extortion negotiations occur privately, and the episode is being investigated amid wider questions about which services and data, if any, were actually compromised.

1 source