The Reddit community announcement has been attacked by a network, and there is no evidence that users' personal data have been affected.
CTOnews.com, February 10 (Xinhua)-- Reddit confirmed on Thursday that the community was subjected to a "complex and targeted phishing attack" on February 5, 2023. Reddit said there was no evidence that hackers accessed the user's data and believed that the user's personal data was secure.
The attacker sent highly camouflaged information alerts to Reddit employees, directed them to jump to websites similar to the company's intranet, and then intercepted their credentials and two-factor tokens.
After obtaining these credentials, the attacker accessed Reddit's internal documents, code, and business systems. Reddit said that in this attack, the attacker did not access, publish or distribute personal data and other non-public data online. The information obtained by the attacker is limited to the contact information of employees and advertisers.
CTOnews.com translated some of the press releases as follows:
According to our current investigation, Reddit users' passwords and accounts are secure, but on Sunday night (Pacific time), the Reddit system was attacked by hackers because of a complex and targeted phishing attack. They have access to some internal documents, code and some internal business systems.