HBO Max Official Reddit Account Hijacked, Malicious Ads Distribute Crypto Theft Tools

HBO Max's official Reddit account was hijacked, resulting in the posting of 108 malicious advertisements over a 48-hour period. The ads lured users to fake software download pages that installed malware on Windows and macOS devices, designed to steal personal information and cryptocurrency theft tools. Decrypt reported that attackers used an authenticated HBO Max account to run fake application and software ads. Blipping Computer noted that security firms Hudson Rock and ADAMnetworks analyzed the campaign, revealing the ads employed a 'ClickFix' method to prompt users to paste commands into terminal or PowerShell windows. Some ads were disguised as offering a macOS-compatible HBO Max app, but instead deployed malware targeting browser credentials, saved passwords, and cryptocurrency wallet recovery phrases.