Attackers hijack HBO Max’s Reddit account for 48

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz Attackers compromised the verified official HBO Max Reddit account, u/hbomax, and used its trusted advertising status to launch a ClickFix campaign targeting macOS and Windows devices with information-stealing malware.

Screenshot of the fraudulent ad (Source: Alex Cutts)

ClickFix has been rising in popularity among cybercriminals. It’s a social engineering technique that cons victims into running malicious commands on their own machine, usually by pretending the commands are needed to fix a problem or perform routine upkeep.

Security researchers at Hudson Rock and ADAMnetworks analyzed the campaign after a Reddit user reported the infostealer ads on September 6.