Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizens Wu Yanzu in South China for the delivery of clues! CTOnews.com reported on June 20 that Reddit, the largest overseas "post bar" website, was attacked in February this year. The attacker now threatens Reddit to publicly steal 80GB data if it does not roll back to the old version of API.

BlackCat, the blackmail software group, yesterday claimed responsibility for the attack in February, phishing to obtain credentials from an employee, access internal systems and steal data.

CTOnews.com previously reported that Reddit said publicly in February this year that attackers sent highly disguised information alerts to Reddit employees, directed them to jump to sites similar to the company's intranet, and then intercepted their credentials and two-factor tokens.

After obtaining these credentials, the attacker accessed Reddit's internal documents, code, and business systems. Reddit said that in this attack, the attacker did not access, publish or distribute personal data and other non-public data online. The information obtained by the attacker is limited to the contact information of employees and advertisers.

BlackCat asked Reddit to pay $4.5 million (CTOnews.com Note: currently about 32.085 million yuan) and withdraw the API charging policy that came into effect on July 1, otherwise disclose 80GB data, including how to track users.

Related readings:

"the Reddit community announcement has been attacked by a network, and there is no evidence that users' personal data have been affected."

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.