Hackers Hijack HBO Max's Reddit Account to Spread Malware via 108 Fake Ads
Security researchers said hundreds of fake Reddit ads lured users to paste commands that installed info-stealing malware.
- Security researchers identified ClickFix as a rising 2026 cybersecurity threat, utilizing fake CAPTCHA prompts to trick users into compromising their own devices.
- Hackers compromised the official HBO Max Reddit account to post fake advertisements, according to Hudson Rock researchers; Warner Brothers Discovery did not respond to requests for comment.
- Upon clicking, a prompt instructs users to copy and paste a string of text into their Windows Command Prompt or Mac Terminal to proceed with a fake check.
- Hitting return instantly installs info-stealing malware that compromises passwords, logged-in accounts, and crypto wallets as part of a massive international effort to hack into computers.
- Companies can block access to these features across their domain to prevent exploitation, while Mac users can employ BlockBlock tool, according to security researcher Kevin Beaumont and Ars Technica.
13 Articles
13 Articles
ClickFix attacks are tricking Mac and Windows users into hacking themselves
If you clicked on a fake HBO Max ad on Reddit in the past week, you might have fallen victim to a rising 'ClickFix' security threat.
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
Hackers compromised HBO Max's official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with information-stealing malware.
Cyber attacks known as ClickFix quickly became one of the most frequent security threats — and, more than that, the invaders
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting
Hackers compromised HBO Max's official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with information-stealing malware. Security researchers at Hudson Rock and ADAMnetworks analyzed the campaign and say the verified u/hbomax Reddit account was hijacked and used to launch 108 malicious advertisements over about 48 […] Thank you for subscribing to our RSS feed!
Coverage Details
Bias Distribution
- 67% of the sources lean Left
Factuality
To view factuality data please Upgrade to Premium













