Reddit Hackers Threaten to Leak 80GB of Stolen Data

The February 5th intrusion on Reddit became as soon as allegedly applied by the ALPHV ransomware operation, also identified as BlackCat.

Probability actors gained Reddit’s systems thru this phishing attempt to blueprint internal paperwork, source code, employee details, and some details about the company’s advertisers.

Reddit printed that its systems had been hacked on February 9. Probability actors particularly teach to procure stolen 80GB of details from the company.

“After successfully acquiring a single employee’s credentials, the attacker gained uncover entry to to some internal docs, code, in addition to some internal dashboards and replace systems,” Reddit CTO Christopher Slowe, beforehand identified as KeyserSosa, explained in a publish.

“We demonstrate no indications of a breach of our critical manufacturing systems (the parts of our stack that race Reddit and retailer the majority of our details).”

Reddit mentioned that no person passwords, accounts, or bank card details had been compromised and that manufacturing systems weren’t compromised.

Probability Actors Demanded $10 Million At some level of The Assault

Reddit mentioned that no person passwords, accounts, or bank card details had been compromised and that manufacturing systems weren’t compromised.

While the corporate did now not present mighty specifics about the phishing assault, they mentioned it became as soon as such as a phishing attempt on Riot Video games that allowed hackers to uncover entry to networks and blueprint the source code for the corporate’s Packman legacy anti-cheat platform, Teamfight Tactics (TFT), and League of Legends (LoL).

Probability actors requested $10 million for the length of the attack on Riot in replace for keeping the stolen details a secret.

Nonetheless, the threat actors tried to promote the records for $1 million on a hacker pickle as soon as the ransom became as soon as now not paid.

The ALPHV Ransomware Operation (BlackCat)

Dominic Alvieri became as soon as the first to admire that the ALPHV ransomware operation, also identified as BlackCat, became as soon as to blame for the assault on Reddit.

Probability actors teach to procure taken 80 GB of compressed details from the firm for the length of the assault, they veritably now intend to indicate the contents in a “Reddit Recordsdata” publish on the gang’s details leak net pickle.

Probability actors teach they made two makes an attempt to uncover in contact with Reddit on April 13 and June 16 and demanded $4.5 million for the converse to be deleted, but they got no resolution.

“I told them in my first electronic mail that I’d dwell up for their IPO to shut abet alongside. But this appears to be like worship the suitable more than just a few! We are very confident that Reddit will now not pay any money for their details,” threatened the ransomware operation.

“But I’m very fully satisfied to know that the public will seemingly be in a pickle to read about your whole statistics they notice about their customers and your whole attention-grabbing confidential details we took.

Did you know in addition they silently censor customers? Along with artifacts from their GitHub!”

The Cyber Security Recordsdata has been in a pickle to verify that here’s the identical assault that Reddit announced in February, even supposing Reddit has did now not comment on BlackCat’s assertion.

Even supposing BlackCat is a ransomware neighborhood, they did now not encrypt any devices for the length of this attack; it desires to be emphasised.