Understand
ASOS app users receive push notifications apparently sent by hackers
Overview
Users of the ASOS app across the UK have received unexpected push notifications that appear to be a ransom note from hackers. The message claims a compromise of a Snowflake instance and directs recipients to a Telegram channel associated with a group calling itself Xuanye Group. Cyber-security experts note that using the app's notification system implies attackers gained access beyond the data platform, suggesting multiple systems may have been breached.
Key points
- ASOS app users received pop-up messages on their phones that appeared to be sent by hackers.
- The notification was addressed to ASOS's DPO and IT team, stating that a Snowflake instance had been compromised.
- The message included a link to a Telegram channel run by a group calling itself Xuanye Group.
- Cyber-security experts suggest that sending push notifications via the ASOS app implies the attackers accessed systems separate from the Snowflake data platform.