ASOS: Hackers tricked way into employee account before sending rogue push notification

ASOS disclosed that attackers impersonated a trusted contact to access an employee account, enabling an unauthorized push notification to customers and access to some personal and account-related information; attackers claimed a Snowflake compromise via a Telegram group called Xuanye Group but that claim is unverified and ASOS reports no payment card data or passwords were accessed.