Published 1 month ago • loading... • Updated 1 month ago
Hackers Hijack HBO Max's Reddit Account to Spread Malware via 108 Fake Ads
Security researchers said 46 fake HBO Max ads on Reddit led users to ClickFix lures that installed info-stealing malware on Windows and Mac devices.
Security researchers identified ClickFix as a rising 2026 cybersecurity threat, utilizing fake CAPTCHA prompts to trick users into compromising their own devices.
Hackers compromised the official HBO Max Reddit account to post fake advertisements, according to Hudson Rock researchers; Warner Brothers Discovery did not respond to requests for comment.
Upon clicking, a prompt instructs users to copy and paste a string of text into their Windows Command Prompt or Mac Terminal to proceed with a fake check.
Hitting return instantly installs info-stealing malware that compromises passwords, logged-in accounts, and crypto wallets as part of a massive international effort to hack into computers.
Companies can block access to these features across their domain to prevent exploitation, while Mac users can employ BlockBlock tool, according to security researcher Kevin Beaumont and Ars Technica.