Xuanye Group
Xuanye Group is classified as other threat group.
- Type
- Other threat group
Xuanye Group is implicated in a breach at ASOS, utilizing social engineering to impersonate a trusted contact and obtain login credentials. They claimed responsibility for the attack, asserting the theft of customer data while clarifying that financial information was not compromised. The group linked their activities to a Telegram channel and threatened to leak stolen data unless negotiations commenced. They have not provided evidence of the stolen data, despite reportedly sharing it with BBC News.
Published reports on this actor:
- https://www.pandasecurity.com/en/mediacenter/global-online-retailer-asos-hacked/
- https://tldr.tech/infosec/2026-10-12
- https://therecord.media/asos-says-hackers-tricked-employee-access-push-notification
Source: MISP Galaxy, Malpedia.
Is your organization mentioned?
Search with your domain to check whether your organization appears in ransomware listings, leaked records, forums and Telegram channels.
Search your domainThreat Intelligence
Track ransomware groups, victim posts and indicators of compromise, and see the records that match your own assets.