Reddit says hackers accessed internal data following employee phishing attack


Reddit has confirmed hackers accessed internal documents and source code following a “highly-targeted” phishing attack.

post by Reddit CTO Christopher Slowe, or KeyserSosa, explained that the company became aware of the “sophisticated” attack targeting Reddit employees on February 5. He says that an as-yet-unidentified attacker sent “plausible-sounding prompts” that redirected employees to a website masquerading as Reddit’s intranet portal in an attempt to steal credentials and two-factor authentication tokens.

Read more…