ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach
ASOS hackers hijack app notifications, claim Snowflake data breach.
ASOS is investigating unauthorized activity after attackers exploited its official mobile app to send malicious notifications. These notifications falsely claimed a data breach involving Snowflake, a cloud data warehousing company. The attackers aimed to trick users into clicking a link that would lead them to a phishing site.
AI summary of the linked source. Not reviewed by an editor. How this works
Run ASOS?
Get an email when a new story names ASOS, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonAttackers gained unauthorized access to ASOS's official mobile app notification infrastructure, weaponizing a trusted channel to distribute phishing messages to unsuspecting users. By falsely claiming a Snowflake data breach, they exploited user anxiety around known cloud provider risks to increase click-through rates on malicious links. This attack demonstrates how compromised push notification systems can bypass traditional email phishing defenses, as users inherently trust alerts from apps they've installed. The incident highlights the danger of insufficient access controls around third-party notification APIs and mobile backend services. When a brand's own infrastructure becomes the delivery mechanism, it dramatically erodes user trust and amplifies the attack's effectiveness.
What helps against this
How we list vendors- Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
- Email security
Phishing, malware and invoice fraud are filtered out before they reach inboxes.
- Security awareness training and phishing simulation
People recognise and report attacks instead of falling for them.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- url — https://asos.promo