Back Pcmag

HBO Max's Reddit Account Was Hijacked to Spread Malware

Pcmag • September 14, 2026

A hacker hijacked an HBO Max -focused account on to trick users into installing malware that can infect Windows PCs and Macs.

The hacker circulated 46 official-looking but fake ads via the u/hbomax account, according to security researchers at Hudson Rock and Adam Networks. Some of the ads a fraudulent desktop app for the streaming service .

A user on first flagged the threat earlier this month after noticing that many of the ads led to a fake domain at hbomaxx[.]us. The site was offering three months of free HBO Max for downloading HBO on macOS. However, clicking the offer triggered a ClickFix-style attack , or a list of seemingly harmless instructions to perform on a Windows PC or Mac.

Hackers often dress up ClickFix attacks to look like CAPTCHA or error screens that can pop up on an internet browser, nudging the users to execute the instructions to resolve the issue. Computer-savvy users will immediately understand the nature of the threat. But the trick can fool casual users who are unaware they're triggering their own computer system to download and execute malware.

The attack used macOS malware designed to steal browser passwords, along with cookies, wallet data, and login credentials from password managers . If the user visited the malicious site on a Windows computer, the domain served a ClickFix-style attack meant for the Microsoft OS.

In addition, the hacker behind the scheme used the same HBO Max account to distribute dozens of other ads and fake apps, including AI tools Claude and Codex, along with a macOS system cleaner. This created a “massive 48-hour malvertising blitz,” an indication that the hacker tried to exploit the HBO Max account for as long as possible before users caught on.

So far, HBO Max hasn’t responded to a request for . But an admin at said last week that the social media platform had “paused the affected ads and are looking into what happened with our Security and Safety teams.”

The incident is a reminder to be vigilant around any websites or pop-ups that ask you to perform seemingly random instructions. Ars Technica reports that ClickFix-style attacks continue to evolve and grow by finding new ways to circulate on the internet.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

HBO Max Account Compromise Fuels ClickFix Malware Campaign In September 2026, hackers compromised the verified HBO Max Reddit account, launching a ClickFix campaign that distributed 108 malicious ads over 48 hours. The ads targeted both macOS and Windows users, tricking them into executing commands that installed information-stealing malware. This operation, dubbed PasteSwitch, utilized social engineering tactics to bypass security measures by convincing users to paste commands into their system terminals. The malware included infostealers, loaders, and cryptocurrency clippers, affecting user credentials and sensitive data. Security researchers from Hudson Rock and ADAMnetworks confirmed the scale and sophistication of the attack, which was paused after user reports prompted an investigation. The compromised account leveraged its trusted status to maximize the impact of the malicious ads. The incident highlights the growing threat of ClickFix attacks, which have become increasingly prevalent in 2026. 45 sources 70

Extracted Entities

HBO Max's Reddit Account Was Hijacked to Spread Malware

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Domains (1)

Platforms (2)

Tools (2)