It says its “security team responded quickly, removing the infiltrator’s access and commencing an internal investigation.” One of its employees fell for the phish, and then self-reported, alerting Reddit to what had happened. What happened?Īccording to Reddit, it “became aware of a sophisticated phishing campaign” late on February 5, 2023, that attempted to steal credentials and two-factor authentication tokens. On Thursday, February 9, 2023, Reddit reported that it had experienced a security incident as a result of an employee being phished.
