ASOS appears to be the latest retailer to be targeted by a cyber-attack. Some customers reported receiving a pop-up message this morning (6 October) purporting to be from hackers, stating that they have “fully compromised the Snowflake instance” and warning ASOS to engage with them or they will leak it.
Snowflake is a data storage company, and the hackers appear to be threatening to leak ASOS customer data. However, at the time of writing, neither ASOS nor Snowflake had yet commented on the incident or clarified exactly what is meant by “the Snowflake instance.”
Cyber-security expert Jen Ellis told the BBC that it is “virtually unheard of” for hackers to use pop-ups in this way. The ASOS chatbot has said that the company is looking into the incident and advised users not to click on any links in the pop-up.
While it’s not yet known whether this was a genuine threat, Marie Wilcox, VP of market strategy at cybersecurity platform Binalyze, described the attack as “psychological warfare” designed to pile pressure onto ASOS so that they pay up rather than “taking time to develop a rational response.”
“The next few hours are crucial,” she said. “ASOS cannot let panicked pressure dictate its response. The priority must be investigation, and closing the gap that allowed this mass notification to go out.
Source link







