Listen to the episode
TLDR
Hackers compromised the official HBO Max Reddit account and used it to run malicious ads that triggered ClickFix social engineering attacks. ClickFix lures victims into copying and pasting a command into Windows Run or a terminal, or...
How it works
Hackers compromised the official HBO Max Reddit account and used it to run malicious ads that triggered ClickFix social engineering attacks. ClickFix lures victims into copying and pasting a command into Windows Run or a terminal, or...
Red flags
- An ad or post asks you to copy a command and paste it into PowerShell, Terminal, or the Run dialog to "fix" a video, login, or verification error. A fake CAPTCHA or "I am not a robot" page instructs you to press Win+R or open Terminal instead of simply ticking a box. The post comes from a hijacked but real looking brand account promoting free streaming, cracked software, or crypto giveaways
What to do
- 1Never run commands copied from web pages, especially ones disguised as verification or troubleshooting steps. Report hijacked brand posts to Reddit and the brand's official support channels, then close the tab. Run a full scan with an up to date anti malware tool and reset crede
Source
bleepingcomputer
Source reviewed by Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/hackers-hijack-hbo-max-reddit-account-to-push-malware-in-clickfix-ads/FAQ
Is Hackers hijack HBO Max Reddit account to push ClickFix malware ads targeting Windows and macOS users a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
An ad or post asks you to copy a command and paste it into PowerShell, Terminal, or the Run dialog to "fix" a video, login, or verification error. A fake CAPTCHA or "I am not a robot" page instructs you to press Win+R or open Terminal instead of simply ticking a box. The post comes from a hijacked but real looking brand account promoting free streaming, cracked software, or crypto giveaways
What should I do first?
Never run commands copied from web pages, especially ones disguised as verification or troubleshooting steps. Report hijacked brand posts to Reddit and the brand's official support channels, then close the tab. Run a full scan with an up to date anti malware tool and reset crede
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.