On social media, dozens of people have posted about receiving the message – confused as to what it means.<\/p>\n
Although the apparent extortion message has been issued directly to customers, it is addressed to Asos’ data protection officer (DPO) and IT team.<\/p>\n
The message claims the unnamed hackers have “fully compromised the Snowflake instance”.<\/p>\n
This refers to the data storage company Snowflake, whose tools are used by dozens of firms for collecting, analysing and storing data.<\/p>\n
It is not known if ASOS is a customer of Snowflake or what data, if any, is stored with the service.<\/p>\n
But Snowflake has been the subject of many high profile data breaches in recent years and has been linked to incidents targeting services including Ticketmaster<\/a> and Santander<\/a>.<\/p>\n It is, however, very unusual for a data breach to be revealed quite so publicly – and for customers to be informed in this manner.<\/p>\n Most extortions and negotiations by cyber criminals are conducted in private, with hackers hoping their discretion will result in a quiet pay-off.<\/p>\n The pop up message contains a link to the hackers’ Telegram channel. <\/p>\n The new group is calling itself Xuanye Group and only created its Telegram channel today.<\/p>\n They have posted only three times with the latest being about the ASOS hack.<\/p>\n Dan Bird, from cyber security firm Horizon3 says the pop up message the criminals sent implies that their access has gone beyond the Snowflake database.<\/p>\n “Sending a push notification to ASOS’s app users would require access to the company’s notification system, which is separate from the Snowflake data platform the attackers claim to have compromised.”<\/p>\n “If both claims hold up, it suggests the attackers got hold of credentials that opened more than one door,” he said.<\/p>\n","protected":false},"excerpt":{"rendered":"On social media, dozens of people have posted about receiving the message – confused as to what it…\n","protected":false},"author":2,"featured_media":793697,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[84,59,56,54,55],"class_list":["post-793696","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-gb","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/793696","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=793696"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/793696\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/793697"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=793696"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=793696"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=793696"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}