How can you recognize HBO Max verified Reddit account hijacked to push ClickFix malware via fake software ads?

Listen to the episode

TLDR

Cybercriminals hijacked HBO Max's verified Reddit account and used it to run 108 malicious ads over about 48 hours. The ads promoted fake AI tools, developer software, and macOS utilities, then redirected visitors to convincing lookalike...

How it works

Red flags

An ad (even from a verified account) asks you to open Terminal, Run, or PowerShell and paste a command. The site offers a "native app" or special download for a service you already use, off the official domain. A countdown, CAPTCHA style check, or urgency cue pushes you to copy and run code without reading it

What to do

1Never paste commands copied from ads, websites, or messages into Terminal or PowerShell. Verify downloads directly on the vendor's official site, not via Reddit/social ads. Keep a real time anti malware and

Source

malwarebytes

Source reviewed by Mythos Forensic Team

https://www.malwarebytes.com/blog/news/2026/09/hbo-maxs-verified-reddit-account-hijacked-to-spread-malware

FAQ

Is HBO Max verified Reddit account hijacked to push ClickFix malware via fake software ads a real scam pattern?

Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.

What are the first warning signs?

An ad (even from a verified account) asks you to open Terminal, Run, or PowerShell and paste a command. The site offers a "native app" or special download for a service you already use, off the official domain. A countdown, CAPTCHA style check, or urgency cue pushes you to copy and run code without reading it

What should I do first?

Never paste commands copied from ads, websites, or messages into Terminal or PowerShell. Verify downloads directly on the vendor's official site, not via Reddit/social ads. Keep a real time anti malware and

Can LegalAudit check my case?

Yes. Start a free chat and paste the message, link, sender, or payment details for triage.