The popular online platform Reddit confirmed on Thursday that it had a security incident earlier this month. Although the attack, described as “sophisticated,” was successful, Reddit says that its users’ personal data is safe and wasn’t accessed by the attackers.
As detailed on the official r/reddit community, Reddit’s systems were hacked by “sophisticated and highly-targeted phishing attack” on February 5, 2023. The attackers sent “plausible-sounding prompts” redirecting employees to a website that cloned the behavior of the company’s intranet. As a result, the attackers were able to steal credentials and two-factor tokens.
