Asos Hit By Extortion Hack That May Have Compromised Some Customer Data
The attackers sent a push notification to Asos shoppers announcing their activity.
Bangla press/Shutterstock
UK-based fashion retailer Asos is doing damage control after its customers were sent a push notification claiming that its cloud services had been hacked. According to The Guardian, Asos users received mobile alerts that were addressed to the company's data protection officer and IT personnel.
The notifications read: "Dear Asos DPO and IT, we have fully compromised the Snowflake instance. Engage with us or we will leak it." Snowflake is a cloud service that handles push notifications as well as managing data about transactions and customer demographics. A link in the message sent users to a Telegram channel claiming to be operated by Xuanye Group, a reportedly unknown name among most cybersecurity circles.
According to the company's statement, "We are investigating unauthorised activity involving third-party platforms that we use to communicate with customers. We took...
Copyright of this story solely belongs to www.engadget.com. To see the full text click HERE
