Email: "Hi, this is IT. It looks like your password is expired. Please change your password by clicking this link. Ignore the weird from address and the fact that the link obviously goes to a noncompany website. We're really from your IT department. Promise!"
Way too many users: "Yup. This looks legit. Better coick that link and enter all of my information right now!"
Apparently, those subreddits are now not only open, but completely unmoderated. Reddit's solution was to remove the mods and put nobody else in charge. I'm sure that won't backfire in any way whatsoever! /s