Kurzfassung
Hackers compromised the official HBO Max Reddit account and used it to run malicious ads that triggered ClickFix social engineering attacks. ClickFix lures victims into copying and pasting a command into Windows Run or a terminal, or...
Wie es funktioniert
Hackers compromised the official HBO Max Reddit account and used it to run malicious ads that triggered ClickFix social engineering attacks. ClickFix lures victims into copying and pasting a command into Windows Run or a terminal, or...
Warnzeichen
- An ad or post asks you to copy a command and paste it into PowerShell, Terminal, or the Run dialog to "fix" a video, login, or verification error. A fake CAPTCHA or "I am not a robot" page instructs you to press Win+R or open Terminal instead of simply ticking a box. The post comes from a hijacked but real looking brand account promoting free streaming, cracked software, or crypto giveaways
Was tun
- 1Never run commands copied from web pages, especially ones disguised as verification or troubleshooting steps. Report hijacked brand posts to Reddit and the brand's official support channels, then close the tab. Run a full scan with an up to date anti malware tool and reset crede
Quelle
bleepingcomputer
Quelle geprueft vom Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/hackers-hijack-hbo-max-reddit-account-to-push-malware-in-clickfix-ads/FAQ
Ist Hackers hijack HBO Max Reddit account to push ClickFix malware ads targeting Windows and macOS users ein reales Betrugsmuster?
Ja. Behandeln Sie Nachricht, Anruf oder Zahlungsaufforderung als verdaechtig, bis ein offizieller Kanal sie bestaetigt.
Was sind die ersten Warnzeichen?
An ad or post asks you to copy a command and paste it into PowerShell, Terminal, or the Run dialog to "fix" a video, login, or verification error. A fake CAPTCHA or "I am not a robot" page instructs you to press Win+R or open Terminal instead of simply ticking a box. The post comes from a hijacked but real looking brand account promoting free streaming, cracked software, or crypto giveaways
Was sollte ich zuerst tun?
Never run commands copied from web pages, especially ones disguised as verification or troubleshooting steps. Report hijacked brand posts to Reddit and the brand's official support channels, then close the tab. Run a full scan with an up to date anti malware tool and reset crede
Kann LegalAudit meinen Fall pruefen?
Ja. Starten Sie den kostenlosen Chat und fuegen Sie Nachricht, Link, Absender oder Zahlungsdaten ein.