Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
The official HBO Max Reddit account was compromised to push malicious ads executing ClickFix attacks that target Windows and macOS devices.
Cybercriminals successfully hijacked the official Reddit account of major streaming service HBO Max. The compromised profile was subsequently used to push malicious advertisements designed to initiate dangerous ClickFix attacks against unsuspecting users.
The campaign specifically targeted users running Windows and macOS devices, delivering information-stealing malware capable of harvesting sensitive data. Attackers leveraged the high trust associated with an official corporate social media presence to maximize their reach.
ClickFix attacks typically rely on social engineering tactics, tricking users into copying and pasting malicious commands under the guise of fixing a fake system error. Consequently, victims inadvertently infect their own machines and compromise their credentials.
This security breach demonstrates that even major enterprise social media accounts remain prime targets for sophisticated threat actors. For the global tech community, it serves as a stark reminder of the persistent risks hiding behind verified digital profiles.
Cybersecurity experts continue to urge users to exercise extreme caution when encountering unexpected prompts, software downloads, or command-line instructions, regardless of how trustworthy the posting account appears to be.
