ASOS app users receive push notifications apparently sent by hackers

ASOS App Users Receive Suspicious Push Notifications

ASOS app users across the UK have been sent pop-up messages from the company's app that appear to have been sent by hackers trying to extort the company, as reported by BBC News. The message reads: "Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it." The notification contains a link to the hackers' Telegram channel, where they have posted only three times, with the latest being about the ASOS hack, according to BBC News.

Snowflake Instance Compromised

The hackers claim to have accessed the Snowflake instance, a cloud platform used to store, process, and analyze data, including transactions and demographic information, as reported by The Guardian. Dray Agha, the senior manager of security operations at Huntress, an online security firm, said: "Snowflake is a massive cloud database where retailers typically store sensitive customer information – it is a real worry if cyber criminals have indeed accessed it as they claim." Dan Bird, from cyber security firm Horizon3, says the pop up message apparently sent by the criminals implies their access has gone beyond the Snowflake database, as reported by BBC News.

ASOS Investigates the Incident

ASOS has not confirmed or commented on the reports of a hack, but the company is investigating the incident, as stated by The Guardian. The website and app remain online, and it is understood that ASOS is still investigating whether any hack has taken place. The value of ASOS's shares on the London Stock Exchange dived almost 12% after thousands of customers received the notification, according to The Guardian.

Cybersecurity Experts Warn of Phishing Attacks

Cybersecurity experts warn that the push notification suggests attackers have breached the systems controlling the ASOS mobile app and that customers should be alert to potential phishing attacks. Dray Agha said: "Sending a ransom demand directly to consumer devices is an aggressive extortion tactic designed to force the business into a quick negotiation. I strongly advise shoppers to watch out for targeted phishing attempts while we wait for official confirmation of a data breach." Marijus Briedis said: "What customers should be particularly alert to now is what happens next. High-profile cyber incidents create ideal conditions for phishing attacks. Criminals may exploit the publicity by sending emails and texts claiming to be from ASOS, perhaps asking customers to reset a password, confirm payment details, check an order or claim a refund."

Comparison of Sources

The following table compares the information provided by different sources:

Source	Information
BBC News	ASOS app users receive push notifications apparently sent by hackers, claiming that the company's data has been "fully compromised" and threatening to leak it.
The Guardian	ASOS is investigating after users of its mobile app received a notification claiming hackers had “fully compromised” the online fashion retailer’s data.
Uniladtech	ASOS shoppers across the internet are reporting an alarming 'hack' that warns the popular online marketplace has been compromised.

Frequently Asked Questions

What is the Snowflake instance?

The Snowflake instance is a cloud platform used to store, process, and analyze data, including transactions and demographic information, as reported by The Guardian.

What should ASOS customers do to protect themselves?

ASOS customers should be alert to potential phishing attacks and watch out for targeted phishing attempts while waiting for official confirmation of a data breach, according to Dray Agha and Marijus Briedis.

Has ASOS confirmed the hack?

No, ASOS has not confirmed or commented on the reports of a hack, but the company is investigating the incident, as stated by The Guardian.

The incident is still under investigation, and ASOS has not confirmed or commented on the reports of a hack. However, the push notification suggests that attackers have breached the systems controlling the ASOS mobile app, and customers should be alert to potential phishing attacks. As the situation develops, it is likely that more information will become available, and ASOS will provide an update on the incident. In the meantime, customers should remain vigilant and watch out for any suspicious activity.