HBO Max Account Compromise Fuels ClickFix Malware Campaign

• •Hackers compromised HBO Max's verified Reddit account to distribute malware ads.
• •The ClickFix campaign targeted macOS and Windows users, tricking them into executing malicious commands.
• •The operation, named PasteSwitch, involved 108 ads over 48 hours, leading to significant data theft.

In September 2026, hackers compromised the verified HBO Max Reddit account, launching a ClickFix campaign that distributed 108 malicious ads over 48 hours. The ads targeted both macOS and Windows users, tricking them into executing commands that installed information-stealing malware. This operation, dubbed PasteSwitch, utilized social engineering tactics to bypass security measures by convincing users to paste commands into their system terminals. The malware included infostealers, loaders, and cryptocurrency clippers, affecting user credentials and sensitive data. Security researchers from Hudson Rock and ADAMnetworks confirmed the scale and sophistication of the attack, which was paused after user reports prompted an investigation. The compromised account leveraged its trusted status to maximize the impact of the malicious ads. The incident highlights the growing threat of ClickFix attacks, which have become increasingly prevalent in 2026.