Updated
Updated · TechCrunch · Sep 14
Hackers Hijack HBO Max Reddit Account for Hundreds of Malware Ads
Updated
Updated · TechCrunch · Sep 14

Hackers Hijack HBO Max Reddit Account for Hundreds of Malware Ads

3 articles · Updated · TechCrunch · Sep 14

Summary

  • Reddit said it locked an HBO Max advertising account after hackers used it to run malicious ads linking users to fake HBO Max pages carrying ClickFix malware lures.
  • Hundreds of ads reportedly pushed victims to copy and paste commands into Windows Command Prompt or Mac Terminal, instantly installing info-stealing malware that can grab passwords, logged-in accounts and crypto wallets.
  • Researchers at Hudson Rock said the campaign used the official HBO Max Reddit account, but neither Reddit nor Warner Bros. Discovery disclosed how many users clicked the ads or were compromised.
  • ClickFix attacks have spread rapidly in 2026 because they abuse trusted sites and direct terminal access, often slipping past antivirus tools; defenders can limit command-line access on managed Windows fleets, while Mac users can use BlockBlock.

Insights

How are stolen session cookies from a simple fake Reddit ad turning personal computer compromises into massive corporate network breaches?
With macOS increasingly targeted by fake CAPTCHA traps, has the long-standing myth of Apple's immunity to malware finally been completely shattered?
If hackers bypass antivirus by tricking you into typing commands, is your device's security now entirely reliant on your own psychology?