The ASOS Incident: When Attackers Use the Channels Customers Trust
Rapid7, Wednesday, October 7th, 2026
Rapid7 examines the hostile push notification sent through ASOS's own app and what attacker use of trusted channels means for defenders.
ASOS customers received a hostile push notification through the retailer's own app claiming its Snowflake environment had been compromised, and ASOS said names and contact details may have been accessed.
Snowflake said its investigation found no compromise of its platform, and the attackers' wider claims remain unverified.
Rapid7 notes that messages from a genuine app bypass the usual red flags such as unfamiliar senders or domains, linking the incident to its research on calendar phishing and Zimbra impersonation.