HBO Max's Reddit Account Compromised to Distribute Malware

HBO Max's Reddit Account Compromised

In a recent cybersecurity breach, HBO Max's verified Reddit account was hijacked, leading to the dissemination of 108 malicious ads over approximately 48 hours. This incident, reported by Hudson Rock, a cybercrime intelligence firm, is part of a broader scheme aimed at stealing sensitive information from users of both Windows and Mac systems.

The compromised account was used to promote a non-existent macOS application for HBO Max, misleading users into executing harmful commands. The ads directed users to open Terminal on Mac or use Run/PowerShell on Windows, where they were instructed to paste commands that could compromise their devices. This tactic, referred to as ClickFix, disguises harmful actions as typical software installation processes.

Researchers have dubbed this operation “PasteSwitch,” which adapts its delivery based on the user's device and the software being targeted. The malware detected included programs like MacSync and Atomic macOS (AMOS), which are designed to extract sensitive credentials, including browser passwords, Telegram data, and cryptocurrency wallet recovery phrases.

Malwarebytes reported that Reddit has since suspended the malicious ads and initiated an investigation into the breach. However, the extent of the damage, including the number of victims and any potential cryptocurrency losses, remains unclear. Notably, while the Reddit account was compromised, there is no evidence suggesting that HBO Max's streaming service itself was breached.

Cybersecurity experts warn that this operation is not isolated; similar tactics have been observed in recent months targeting cryptocurrency users. Previous incidents involved compromised websites and fake verification prompts designed to steal wallet information, highlighting the ongoing threat posed by such cyber schemes.