Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.
Xuanye Group is implicated in a breach at ASOS, utilizing social engineering to impersonate a trusted contact and obtain login credentials. They claimed responsibility for the attack, asserting the theft of customer data while clarifying that financial information was not compromised. The group linked their activities to a Telegram channel and threatened to leak stolen data unless negotiations commenced. They have not provided evidence of the stolen data, despite reportedly sharing it with BBC News.
No exploited CVEs have been attributed to this threat actor yet.
Browse CVE Database