CyberNew CyberNew
Threat Intelligence & APT The Record 1 week ago

Shares in British clothing company ASOS dive after hackers apparently send push notification

CN
CyberNew Threat Research Desk
• Original Reporting: The Record
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"A sign at an ASOS pop-up in November 2023. Image: asos.com Shares in British clothing company ASOS dive after hackers apparently send push notification Shares in British online fashion retailer ASOS fell more than 10% on Tuesday after customers reported receiving a push notification through the company’s app saying the business had been hacked. Screenshots shared on social media showed a..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)
ASOS
A sign at an ASOS pop-up in November 2023. Image: asos.com

Shares in British clothing company ASOS dive after hackers apparently send push notification

Shares in British online fashion retailer ASOS fell more than 10% on Tuesday after customers reported receiving a push notification through the company’s app saying the business had been hacked.

Screenshots shared on social media showed a notification titled “ASOS HACKED” that said: “Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it.”

The notification linked to a Telegram channel calling itself Xuanye Group, a name not previously seen by experts who track cyber extortion groups. Such groups typically contact companies privately before publishing stolen data or publicly claiming responsibility for a breach.

The people behind the message provided no evidence that they had compromised ASOS’s Snowflake cloud data environment.

Charlotte Wilson, an executive at cybersecurity company Check Point, said: “If confirmed, this is a deeply serious attack because the hackers appear to have done something particularly brazen: turned ASOS’s own app into their ransom note.”

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from The Record.

Primary Advisory →