In a security announcement issued by Reddit this Friday, a Reddit user released a previously leaked British government document, and there are various indications that it “believe this was part of a campaign that has been reported as originating from Russia.”
In the announcement, the network connected to multiple accounts repeatedly published the leaked document in multiple popular sections of Reddit and manipulated Reddit’s voting system to highlight the content of the file. All these activities are to make more people pay attention to these Disclosure documents.
Reddit said in a blog post:
Earlier this year Facebook discovered a Russian campaign on its platform, which was further analyzed by the Atlantic Council and dubbed “Secondary Infektion.” Suspect accounts on Reddit were recently reported to us, along with indicators from law enforcement, and we were able to confirm that they did indeed show a pattern of coordination. We were then able to use these accounts to identify additional suspect accounts that were part of the campaign on Reddit. This group provides us with important attribution for the recent posting of the leaked UK documents, as well as insights into how adversaries are adapting their tactics.
In late October, an account u/gregoratior posted the leaked documents and later reposted by an additional account u/ostermaxnn. Additionally, we were able to find a pocket of accounts participating in vote manipulation on the original post. All of these accounts have the same shared pattern as the original Secondary Infektion group detected, causing us to believe that this was indeed tied to the original group.