Asos users receive apparent hacker extortion pop-up messages via app
Dozens of people report strange notifications addressed to Asos's DPO and IT team claiming a Snowflake instance was compromised.
Quick Look
Asos users across the UK received app notifications appearing to be extortion messages from hackers claiming to have compromised a Snowflake instance and demanding the company engage with them.
AI-generated summary
Why It Matters
Asos users received unexpected app messages addressed to the company's DPO and IT team regarding a Snowflake instance.
Asos users across the UK have been sent pop-up messages from its app that appear to have been sent by hackers trying to extort the company.
Dozens of people have told the BBC about receiving a strange message from the clothing and beauty store's app, appearing on their phone screens.
"Dear ASOS DPO and IT, we have fully compromised the Snowflake instance. Engage with us, or we will leak it," the message reads.
Asos did not immediately respond to the BBC's requests for comment.
On social media, dozens of people have posted about receiving the message - confused as to what it means.
Although the apparent extortion message has been issued directly to customers, it is addressed to Asos' data protection officer (DPO) and IT team.
The message claims the unnamed hackers have "fully compromised the Snowflake instance".
It also refers to the data storage company Snowflake, whose popular tools have been used by dozens of firms for collecting, analysing and storing data.
It is not known if ASOS is a customer of Snowflake or what data, if any, is stored with the service.
Open Questions
- Is Asos a customer of Snowflake?
- What data, if any, is stored with the service?
- How were the push notifications sent to users?
