ASOS App Users Receive Extortion Messages From Group Claiming Snowflake Compromise
Summary
ASOS app users in the UK received pop-ups allegedly sent by Xuanye Group, which claimed it had compromised ASOS’s Snowflake instance and used the app to target the company with an extortion message.
Key points
- Unexpected pop-up messages appeared to ASOS app users in the UK.
- The messages targeted ASOS’s data protection officer and IT team in an extortion attempt.
- The group, which identified itself as Xuanye Group, claimed to have fully compromised ASOS’s Snowflake instance; the article does not confirm the claim.
- The attackers reportedly used the app itself to deliver the ransom message.
- Xuanye Group also created a Telegram channel to communicate.
Article Details
- Victim Organization
- ASOS
- Victim Domain
- asos.com
- Incident Type
- Alleged app compromise or misuse to display pop-up ransom messages
- Disclosure Date
- 2026-10-06
- Operational Impact
- ASOS app users in the United Kingdom received unexpected pop-up messages. The source does not report other operational disruption.
- Ransom Or Extortion
- The messages were reportedly directed at ASOS’s DPO and IT team as an extortion attempt. The attackers claimed they had fully compromised ASOS’s Snowflake instance; the source does not confirm that compromise.
- Claim Status
- claimed