Reddit security incident
Reddit, a social news aggregation, content rating and discussion website, has released a statement reporting a hack of its systems as a result of a spear phishing attack on the platform's employees.
Once an employee's credentials were obtained, according to the official release, the attacker gained access to internal documents, code, internal dashboards and business systems. The exposed information included data on company contacts and employees (current and former), as well as limited advertiser information.
Reddit continues to investigate the incident, and recommends enabling 2FA and using a password manager.
References
- 09/02/2023 reddit.com We had a security incident. Here’s what we know.
- 09/02/2023 bleepingcomputer.com Hackers breach Reddit to steal source code and internal data
- 10/02/2023 forbes.com Reddit Confirms It Was Hacked—Recommends Users Set Up 2FA
- 10/02/2023 xataka.com Lo que el hackeo a Reddit nos enseña sobre los peligros del phishing, incluso si vales 10.000 millones de dólares