#Lastpass security breach reddit code#

How did Reddit find out about the breach? If it related to critical applications, for example, there’s an increased likelihood that the hackers responsible could then exploit vulnerabilities in Reddit’s platform at a later date, triggering a severe cyber-attack.

#Lastpass security breach reddit code#

We’re also curious about exactly what source code was accessed in the attack. They could potentially use this information to craft even more sophisticated, convincing phishing scams in the future. While it’s great that customer information wasn’t compromised, the fact that the threat actors got away with employee information is undeniably worrying.

However, the post noted that the attacker did get away with some sensitive data relating to employees, advertisers and partners. Thankfully, it appears the attacker didn’t manage to infiltrate primary production infrastructure, where most of Reddit’s sensitive information resides. The hackers then used this info to successfully breach Reddit’s internal systems, where they accessed “some internal docs, code, as well as some internal dashboards and business systems.”

One employee, unfortunately, fell for the trick, entering their details into the phony site. How did the Reddit breach happen?Īs with many breaches these days, the Reddit incident has its routes in a highly-targeted phishing scam.Īccording to the breach notification post from Reddit’s CTO, an unknown attacker sent out “plausible-sounding prompts” directing Reddit employees to a fraudulent website that mimicked the company’s intranet portal in a bid to harvest credentials and multi-factor authentication tokens. How did it happen? What did hackers steal? Should you be worried? We’ll answer all that and more below. News just in! Reddit, the hugely popular social news website and forum, has suffered a data breach.