DIGITAL LIFE

Reddit suffered a cyberattack tonight

Reddit suffered a cyberattack on Sunday night and hackers who gained access to internal systems stole some internal documents and source code and accessed some internal business systems.

Reddit says the hackers sent company employees very plausible instructions that led them to a website that looked like the intranet site. On that site, hackers attempted to steal employee credentials and two-factor authentication tokens.

The hackers were able to trick one of the employees into breaking into Reddit's internal systems, where they stole data and source code.

Reddit says they learned about the attack when the employee himself reported the incident to the company's security team, and that it was a sophisticated targeted phishing campaign that targeted Reddit employees.

The investigation, which is still ongoing, found that the stolen data included limited contact information for company contacts (hundreds of them) and current and former employees, as well as some details about the company's advertisers.

However, Reddit says that there is no indication that the attackers were able to break into the systems used to run the site, and that there is no evidence that user passwords and accounts were compromised.

When an employee whose credentials were stolen by hackers reported the incident, Reddit's security team quickly responded, disabling access to the hackers and launching an internal investigation.

Reddit reminded users of the importance of protecting their accounts with two-factor authentication (2FA), which is an additional layer of protection for Reddit accounts. The company's recommendation is to regularly change the password every few months, and the password must be strong and unique to the Reddit account. Reddit advised users to consider using a password manager that not only protects accounts with complicated passwords that users don't have to remember, but also warns you when you try to use a password on a phishing site because the domains don't match.

mundophone