Hackers Hijack HBO Max's Reddit Account to Spread Malware via 108 Fake Ads
Security researchers said 46 fake HBO Max ads on Reddit led users to ClickFix lures that installed info-stealing malware on Windows and Mac devices.
- Security researchers identified ClickFix as a rising 2026 cybersecurity threat, utilizing fake CAPTCHA prompts to trick users into compromising their own devices.
- Hackers compromised the official HBO Max Reddit account to post fake advertisements, according to Hudson Rock researchers; Warner Brothers Discovery did not respond to requests for comment.
- Upon clicking, a prompt instructs users to copy and paste a string of text into their Windows Command Prompt or Mac Terminal to proceed with a fake check.
- Hitting return instantly installs info-stealing malware that compromises passwords, logged-in accounts, and crypto wallets as part of a massive international effort to hack into computers.
- Companies can block access to these features across their domain to prevent exploitation, while Mac users can employ BlockBlock tool, according to security researcher Kevin Beaumont and Ars Technica.
16 Articles
16 Articles
ClickFix attacks are tricking Mac and Windows users into hacking themselves
If you clicked on a fake HBO Max ad on Reddit in the past week, you might have fallen victim to a rising 'ClickFix' security threat.
Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
Hackers compromised HBO Max's official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with information-stealing malware.
Hackers Hijack HBO Max Reddit Account to Push 108 ClickFix Malware Ads
Hackers have used a trusted Reddit identity to turn advertisements into a malware delivery channel. A compromised, verified HBO Max account, u/hbomax, published 108 malicious ClickFix ads over 48 hours, sending people toward fake software pages. The campaign did not rely on a software vulnerability. It relied on persuasion: a polished page claimed to offer […]
Hackers Hijack HBO Max Reddit Account to Spread Malware Through Fake Ads
Copyright protected content copied from PhoneWorld website. Hackers have reportedly compromised the official HBO Max Reddit account and used it to distribute malicious advertisements. The campaign targeted both Windows and macOS users with a social engineering technique known as ClickFix. Security researchers from Hudson Rock and ADAMnetworks found that the verified u/hbomax account published 108 malicious advertisements over roughly 48 hours. T…
Coverage Details
Bias Distribution
- 50% of the sources lean Left, 50% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium













