Reddit revealed it had been the victim of a targeted phishing scheme
that exposed internal docs, dashboards, code and contracts, along with some advertisers' and current and former employees' information. None of the data appears to have found its way to the public, but that could soon change. Ransomware gang BlackCat, also known as ALPHV, has just taken responsibility for the hack and claims to have 80GB of compressed data. In a post called"The Reddit Files," BlackCat announced it would delete the information if Reddit gives it $4.
BlackCat captured the information through a scheme that saw employees receive"plausible sounding prompts" to visit a website designed just like Reddit's intranet gateway. One individual fell for the trick, allowing hackers to steal their login details and second-factor tokens. The person then self-reported their mistake, and it's believed the security breach didn't compromise Reddit users' personal information.
Now, months later, the hackers have publicly revealed themselves in the midst of site-wide protests against API price hikes . The increased cost is forcing popular third-party apps like Narwhal and Apollo to shut down, with Apollo creator Christian Selig claiming he would need to