However, most security professionals discourage this. Reddit also suggests that users update their passwords monthly. This adds another layer of protection even if someone has your password. The management recommended users to set up two-factor authentication (2FA) on their accounts. While Reddit believes personal users and businesses were not affected, the platform still encourages individuals to take some measures to protect their data. According to the firm, even the stolen information hasn’t been published or distributed online. The attacker only managed to access some internal documents, code, and internal business systems.
They insist that personal user and non-public data was not compromised. The firm believes there was limited contact with the current and former employees, and advertiser information was exposed. The teams removed the attackers' access and commenced an immediate investigation. The said employee self-reported the incident to Reddit’s security teams, prompting them to act immediately.
But, this enabled the attacker to access Reddit’s internal systems. They did this to attempt to steal information and two-factor authentication (2FA) tokens.įortunately or unfortunately, they only managed to steal one employee's credentials. The attacker sent “plausible-sounding prompts” to employees that redirected them to a website masquerading as the firm’s intranet portal. But, according to the firm, attackers gained access to the company’s data using a targeted phishing campaign. However, Reddit assures users that it is under investigation. There is still scarce information on this incident and its effect. While they admit that the stolen data included details of their advertisers, they insist that passwords and credit card information were not breached. But at the same time, the company reveals that there isn’t proof of a security breach on the systems that run the platform and store most of their data. It refers to it as “sophisticated phishing” targeting Reddit employees.Īccording to the CEO, the unidentified persons accessed internal documents, internal dashboards, business systems, and codes. The company announced on February 9th in a posting that they first became aware of the incident that happened on February 5th. Reddit, a popular social news site, disclosed that it was hacked on Sunday night (pacific time).
0 kommentar(er)
