Executive Summary

ASOS customers received a push notification claiming a breach of the company. The message was sent by attackers and appears to be a phishing attempt designed to trick users into revealing credentials or installing malware. The incident demonstrates how push notifications can be weaponized for social engineering. No evidence of data exfiltration or malware delivery has been reported yet.

---

Intelligence Metadata - Source Publisher: Malwarebytes Labs - Published Date: 2026-10-06T14:11:11+00:00 - Category: campaigns

Original Description: ASOS customers received a push notification regarding a breach of the company. Here's what we know so far.

"He who knows, does not speak. He who speaks, does not know."

— Lao Tzu