Reddit Threatened with Leaking of 80 GB of Confidential Data by Ransomware Gang ALPHV
BlackCat Demands $4.5 Million for Stolen Data
The ransomware gang ALPHV, better known as BlackCat, has threatened Reddit with leaking 80 GB of confidential data. The popular community site must pay 4.5 million dollars (4.1 million euros) from them and reverse the recently increased API costs.
The ransomware criminals captured the 80 GB of Reddit data in an attack in February this year, writes Techcrunch. Through a very targeted phishing attack, the hackers succeeded in stealing data from Reddit employees and internal documents.
End user data, such as passwords and other account information, would not have been stolen.
Leak Inevitable if Reddit Does Not Pay
BlackCat itself recently confirmed responsibility for the February attack. The cybercriminals say they have contacted the community site twice this year, but have never received a response. The hackers are therefore convinced that the company will never pay for the stolen data, so disclosure is inevitable.
BlackCat is asking Reddit to pay $4.5 million for the 80 GB of stolen data, along with the recent rollback of API cost changes.
These new API charges have caused quite a stir among end users of Reddit and related services in recent weeks. Some services that use these APIs have now announced that they will stop due to the price increase.
Reddit itself is not commenting on the news from the cybercriminals.
Mass Protest Against API Policy Reddit Threatens to be in Vain
The recent increase in API costs has caused a lot of uproar among Reddit users and related services. Some services that use these APIs have now announced that they will stop due to the price increase.
However, it seems that the mass protest against the API policy of Reddit will be in vain, as the ransomware gang ALPHV, better known as BlackCat, has threatened to leak 80 GB of confidential data from Reddit unless the company pays 4.5 million dollars (4.1 million euros).
BlackCat has already confirmed responsibility for the February attack and has contacted the community site twice this year, but has never received a response. The hackers are therefore convinced that the company will never pay for the stolen data, so disclosure is inevitable.
Reddit itself is not commenting on the news from the cybercriminals.