Cyber threat actors compromised the official HBO Max Reddit account and used it to promote malicious advertisements. These ads leveraged ClickFix social engineering tactics to trick users into executing commands that installed information-stealing malware on both Windows and macOS systems. The incident highlights the growing risk of threat actors targeting high-profile social media accounts to distribute malware through trusted brand channels.

What should defenders do?

Users should be wary of any advertisement or post prompting them to run command-line instructions (ClickFix lures). Ensure Reddit and HBO Max account credentials are secured with strong, unique passwords and multi-factor authentication. Monitor official communications from HBO Max and Reddit for security updates. Antivirus and endpoint detection solutions should be kept up to date to detect information-stealing malware.

highMalware

HBO Max Reddit Account Compromised to Distribute ClickFix Malware Campaign

Hackers used the official HBO Max Reddit account to promote malicious advertisements, leading to the infection of Windows and macOS devices with information-stealing malware.

CyberIntel DeskPublished 15 days agoUpdated less than a minute ago1 min read

HBO Max Reddit Account Compromised to Distribute ClickFix Malware Campaign

Key Takeaways

Hackers compromised the official HBO Max Reddit account to distribute malicious ads.
ClickFix social engineering lures were used to trick users into executing commands.
Information-stealing malware was installed on both Windows and macOS devices.
No software patch exists; mitigation relies on account security and user awareness.

Related Security News

highCyber Attacks

Star Blizzard Campaign Targets 100+ Organizations with Fake Event Invitations

Microsoft reports that the Russian state-sponsored threat actor Star Blizzard has been conducting a sustained campaign since January 2026, using fake event invitations to trick targets into installing a backdoor on Windows computers. The operation has affected more than 100 organizations, primarily in the U.S. and U.K., with victims tied to Ukraine. At least one infection has been confirmed, though the full extent of breaches and data exfiltration remains unverified.

The Hacker Newsabout 5 hours ago1 min read