En bref
Hackers compromised the official HBO Max Reddit account and used it to run malicious ads that triggered ClickFix social engineering attacks. ClickFix lures victims into copying and pasting a command into Windows Run or a terminal, or...
Comment ca fonctionne
Hackers compromised the official HBO Max Reddit account and used it to run malicious ads that triggered ClickFix social engineering attacks. ClickFix lures victims into copying and pasting a command into Windows Run or a terminal, or...
Signaux d'alerte
- An ad or post asks you to copy a command and paste it into PowerShell, Terminal, or the Run dialog to "fix" a video, login, or verification error. A fake CAPTCHA or "I am not a robot" page instructs you to press Win+R or open Terminal instead of simply ticking a box. The post comes from a hijacked but real looking brand account promoting free streaming, cracked software, or crypto giveaways
Que faire
- 1Never run commands copied from web pages, especially ones disguised as verification or troubleshooting steps. Report hijacked brand posts to Reddit and the brand's official support channels, then close the tab. Run a full scan with an up to date anti malware tool and reset crede
Source
bleepingcomputer
Source verifiee par Mythos Forensic Team
https://www.bleepingcomputer.com/news/security/hackers-hijack-hbo-max-reddit-account-to-push-malware-in-clickfix-ads/FAQ
Hackers hijack HBO Max Reddit account to push ClickFix malware ads targeting Windows and macOS users est une vraie arnaque ?
Oui. Traitez le message, l'appel ou la demande de paiement comme suspect jusqu'a verification via un canal officiel.
Quels sont les premiers signaux ?
An ad or post asks you to copy a command and paste it into PowerShell, Terminal, or the Run dialog to "fix" a video, login, or verification error. A fake CAPTCHA or "I am not a robot" page instructs you to press Win+R or open Terminal instead of simply ticking a box. The post comes from a hijacked but real looking brand account promoting free streaming, cracked software, or crypto giveaways
Que faire en premier ?
Never run commands copied from web pages, especially ones disguised as verification or troubleshooting steps. Report hijacked brand posts to Reddit and the brand's official support channels, then close the tab. Run a full scan with an up to date anti malware tool and reset crede
LegalAudit peut-il verifier mon cas ?
Oui. Lancez le chat gratuit et collez le message, le lien, l'expediteur ou les details de paiement.