Hackers Accessed Reddit's Business Systems, Stole Documents and Source Code

Feds say DPRK hackers ransom hospitals to fuel cyberattacks on US and S. Korea, New threat actor uses screenshots to gauge target worthiness, 1Password will offer plan that ditches password, much more

Photo by Brett Jordan on Unsplash

Reddit suffered a cyberattack allowing hackers to access internal business systems and steal internal documents and source code.

The company says it discovered on February 5 that hackers used a phishing lure targeting Reddit employees with a landing page impersonating its intranet site, which attempted to steal employees' credentials and two-factor authentication tokens.

"After successfully obtaining a single employee's credentials, the attacker gained access to some internal docs, code, as well as some internal dashboards and business systems," Reddit said. "We show no indications of breach of our primary production systems (the parts of our stack that run Reddit and store the majority of our data)."

Reddit says the stolen data includes…