[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$flUbCyAEnUZHfHJ76atFmx9s_OCOi32YTbUjuQA5jr3I":3},{"article":4,"iocs":39,"watch_terms":44,"solutions":45,"lesson":133},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":22,"category":23,"article_tags":26},"4878d555-1057-494e-84cc-5b2fe01b3380","ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach","asos-hackers-hijack-app-notifications-claim-snowflake-data-breach-2e5cbe","British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…","ASOS is investigating unauthorized activity after attackers exploited its official mobile app to send malicious notifications. These notifications falsely claimed a data breach involving Snowflake, a cloud data warehousing company. The attackers aimed to trick users into clicking a link that would lead them to a phishing site.","ASOS hackers hijack app notifications, claim Snowflake data breach.","https:\u002F\u002Fhackread.com\u002Fasos-hackers-hijack-app-notifications-snowflake-data-breach\u002F",null,"2026-10-06T21:56:25+00:00","2026-10-06T22:00:22.528248+00:00",7,[17,20],{"name":18,"type":19},"ASOS","vendor",{"name":21,"type":19},"Snowflake","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":22,"icon":12,"name":24,"slug":25},"Breaches","breaches",[27,32,34],{"category":28},{"id":29,"icon":12,"name":30,"slug":31},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":33},{"id":22,"icon":12,"name":24,"slug":25},{"category":35},{"id":36,"icon":12,"name":37,"slug":38},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[40],{"type":41,"value":42,"context":43},"url","https:\u002F\u002Fasos.promo","Phishing site linked in malicious ASOS app notifications",[18,21],{"controls":46,"vendors":132},[47,76,105],{"slug":48,"name":49,"problem":50,"products":51},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":77,"name":78,"problem":79,"products":80},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-office-365","Microsoft Defender for Office 365","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fsiem-and-xdr\u002Fmicrosoft-defender-office-365","Protection for Exchange Online, Teams and SharePoint against phishing, malicious links and attachments.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"slug":106,"name":107,"problem":108,"products":109},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",[110,117,125],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":106,"product_name":114,"url":115,"description":116},"knowbe4","KnowBe4","\u002Fvendor-logos\u002Fknowbe4.png","KnowBe4 Security Awareness Training","https:\u002F\u002Fwww.knowbe4.com\u002Fproducts\u002Fsecurity-awareness-training","Training library and simulated phishing with reporting.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-sat","Huntress Managed Security Awareness Training","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fsecurity-awareness-training","Security awareness training and phishing simulation, managed for you.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":126,"product_name":129,"url":130,"description":131},"sosafe","SoSafe","\u002Fvendor-logos\u002Fsosafe.png","SoSafe Awareness Platform","https:\u002F\u002Fsosafe-awareness.com\u002F","Behaviour-based awareness training and phishing simulation in many languages.",[],{"slug":134,"title":135,"body":136,"framework_refs":137,"framework_notes":149},"asos-app-hijacked-to-deliver-phishing-notifications-disguised-as-snowflake-breach-alert","ASOS App Hijacked to Deliver Phishing Notifications Disguised as Snowflake Breach Alert","Attackers gained unauthorized access to ASOS's official mobile app notification infrastructure, weaponizing a trusted channel to distribute phishing messages to unsuspecting users. By falsely claiming a Snowflake data breach, they exploited user anxiety around known cloud provider risks to increase click-through rates on malicious links. This attack demonstrates how compromised push notification systems can bypass traditional email phishing defenses, as users inherently trust alerts from apps they've installed. The incident highlights the danger of insufficient access controls around third-party notification APIs and mobile backend services. When a brand's own infrastructure becomes the delivery mechanism, it dramatically erodes user trust and amplifies the attack's effectiveness.",[138,139,140,141,142,143,144,145,146,147,148],"CIS Control 5 – Account Management","CIS Control 6 – Access Control Management","CIS Control 8 – Audit Log Management","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-6 (Least Privilege)","NIST SP 800-53 IR-6 (Incident Reporting)","NIST SP 800-53 SI-3 (Malicious Code Protection)","GDPR Article 33 – Notification of a Personal Data Breach to the Supervisory Authority","GDPR Article 34 – Communication of a Personal Data Breach to the Data Subject","OWASP Mobile Top 10 – M1: Improper Platform Usage","ITIL – Incident Management & Problem Management processes",{}]