ASOS app users receive push notifications apparently sent by hackers
3 hours ago
- ASOS app users in the UK received unexpected pop-up messages that appear to be from hackers attempting to extort the company.
- The message claims the hackers have 'fully compromised the Snowflake instance' and threatens to leak data unless ASOS engages with them.
- Security experts describe the attack as highly brazen because the hackers used ASOS's own app as a ransom note to reach customers directly.
- Snowflake is a data storage company that has been linked to previous high-profile breaches at Ticketmaster and Santander.
- It is highly unusual for cyber extortion attempts to be made so publicly, as negotiations are normally conducted privately.
- The message includes a link to a newly created Telegram channel for a group calling itself Xuanye Group.
- Experts suggest that sending push notifications requires access to ASOS's notification system, implying the hackers may have obtained credentials giving them access to multiple systems.