Online discussion platform Reddit on Friday confirmed that its systems were hacked as a result
of a sophisticated and highly targeted phishing attack.
According to Reddit CTO Christopher Slowe or Keyserosa, the company became aware of a
“sophisticated” attack targeting its employees on February 5th.
“As with most phishing campaigns, the attacker sent plausible-sounding signals pointing
employees to a website that cloned the behavior of our intranet gateway, in an attempt to steal
credentials and second-factor tokens,” Slowe said.
After successfully obtaining an employee’s credentials, the attacker gained access to some
internal documents, code, as well as some internal dashboards and business systems.
“We show no signs of a breach in our primary production systems (the parts of our stack that
run Reddit and store most of our data),” the CTO said.
The exposure included limited contact information for (currently hundreds) of company
contacts and employees (current and former), as well as limited advertiser information.
“We have no evidence to suggest that any of your non-public data has been used, or that
Reddit information has been published or distributed online,” Slowe wrote in a post.
The company is closely investigating and monitoring the situation and working with its
employees to strengthen security skills.
Reddit said, “One of the most important (and simplest) measures you can take is to set up 2FA
(two-factor authentication), which adds an extra layer of security when you’re accessing your
Reddit account.”
This story has not been edited by The Kashmir Monitor staff and was auto-generated
from a syndicated feed.
https://pipanews.com
