A direct message arrives on Reddit from a stranger, and it invites a reply. That reply is the point. This scheme runs on social engineering, with no malware and no malicious links, and it has spread across Reddit, Discord, and similar platforms. The goal is a single piece of information: a login or verification code that hands your account to someone else. “The conversation usually starts with one of two claims. Either the person says … More →

The post The fake report message that ends with a stolen Reddit account appeared first on Help Net Security.