ASOS app users receive push notifications apparently sent by hackers

rithdmc

Does Snowflake allow you to push messages via in-app messaging? I didn't think it did. This breach might be a little broader than reported.

domaaju

I received the push notification via the app this morning as well. Extremely bizarre and not how normally one finds out about a company getting hacked.

andruschakartem

The ransom note was addressed to their DPO, customers just got CC'd via push.

glownagger

Five popups. Five. To read this article that doesn't even tell me what ASOS is.

m4tthumphrey

Stock down 13% today. Interestingly ASOS has been steadily growing this year, would be interested to see Polymarkets today...

hnacobsxph

Braze API keys end up in a dozen CI configs and nobody rotates them. Campaign send is one POST.

iamacyborg

I am genuinely impressed at the lack of tech literacy in the live feed about this from the beeb.

eameam

Seems more likely to me that the braze api key was exposed

NoHedgeAllBets

Thanks to this hack I now know what ASOS is.

cube00

> Asos did not immediately respond to the BBC's requests for comment. Amazing how companies think if they say nothing it'll somehow just go away. Couldn't even be bothered to reply to say they're looking into it.

ChrisRR

Why does a clothes store need an app in the first place?

lostmsu

The right reaction to any undesired notification is immediate removal of the app.