Reddit Locks HBO Max Ad Account After 108 Malware Ads Ran in 48 Hours
Updated
Updated · Fox News · Sep 23
Reddit Locks HBO Max Ad Account After 108 Malware Ads Ran in 48 Hours
3 articles · Updated · Fox News · Sep 23
Summary
Reddit said it locked an HBO Max advertising account after attackers used the verified profile to run 108 malicious ads that linked users to malware-laced pages.
Hudson Rock found the campaign used ClickFix tactics: fake HBO Max and software download pages told victims to paste attacker-supplied commands into Terminal, PowerShell or Windows Run.
Researchers tied the ads to a broader PasteSwitch operation that changed lures and payloads by platform, stealing browser data, passwords, Telegram data and cryptocurrency wallet recovery phrases.
Windows victims could be routed through mshta and PowerShell to load malware in memory, while clipboard hijackers could swap copied crypto addresses before a transaction is sent.
The case highlights how compromised verified accounts can weaponize brand trust; Reddit said it removed the ads, worked with HBO Max on security and found no impact on other ad accounts.