Reddit revealed on Thursday that it had fallen prey to “a sophisticated and highly-targeted phishing attack.” On February 5, the group learned of the phishing campaign aimed at its personnel. Several workers clicked on “plausible-sounding instructions” that took them to a bogus website that resembled Reddit’s intranet gateway. An employee put their login information on this phoney website, and the hacker gained access to Reddit.
The hacker could access their internal documents, code, dashboards, and business systems, claim Reddit CTO Christopher Slowe. There are no indications that they have accessed the critical production systems which power Reddit.
Most significantly, there was no proof that private user information was accessed during the hack, according to an assessment by Reddit’s security, engineering, and data science teams. As a result, our accounts, private messages, and passwords are likely to be secure.
The team responded: “Shortly after the victim reported that they had been phished, the security team acted rapidly to remove the intruder’s access and launch an internal inquiry. Recently, reports of similar phishing attacks have been made. We are continuing our investigation, keeping a close eye on the situation, and working with our staff to improve our security capabilities. We all know that the human element of security is frequently the weakest link.
Reddit is using the moment to urge everyone to set up two-factor authentication (2FA) on their accounts even though nobody’s accounts were compromised. This adds a security layer that can shield your data if the subsequent breach is more serious. Go to this link and follow the instructions to set up 2FA on your Reddit account.
In keeping with Reddit, Slowe also ran an AMA on the hack to address any queries users may have had. Slowe acknowledged in the AMA that the employee who came forward was not terminated but may have been punished by being placed in stocks.
Also read: This full length article provides briefing about virtual data room for startup. You too can contact if you are new at your business.
Also read: If you are looking for online help for your school and college assignment, we provide genuine essay writing services in the UK.
