As cited
Copy frozen at (site build).
threat intel
The fake report message that ends with a stolen Reddit account
A social engineering campaign targeting Reddit users relies on deceptive direct messages that appear to be account reports, tricking recipients into sharing login credentials or verification codes. The scheme spreads across Reddit, Discord, and similar platforms without using malware or malicious links, relying instead on fraudulent claims to prompt users to reveal authentication information.
Why it matters: Reddit, Discord, and other platform users are at risk of account takeover if they respond to these fake report messages with credentials or codes; practitioners should educate their organizations about account compromise indicators and implement stronger verification processes for account recovery requests.
- Source published
- First seen by Cybersecurity Tracker