Hackers Compromise HBO Max Reddit Account to Distribute Malware

Hackers hijacked HBO Max's verified Reddit account earlier this month, running 108 malicious advertisements over two days, according to cybersecurity experts. Researchers from Hudson Rock linked the account takeover to a broader operation targeting passwords and cryptocurrency wallet information. The incident was highlighted by a user in the r/cybersecurity subreddit, who encountered an official advertisement promoting a non-existent macOS application for HBO Max. Instead of providing an installer, the site instructed users to execute commands that could infect their computers. This technique, known as ClickFix, disguises malicious commands as routine installation steps. The operation, dubbed 'PasteSwitch,' adapts its delivery system to the visitor's device and advertised software. Observed Mac payloads included MacSync and Atomic macOS (AMOS), designed to steal sensitive information such as browser credentials and cryptocurrency wallet recovery phrases. Researchers noted that the malware utilized Binance Smart Chain contracts to maintain communication with the hackers' control server. The operation was also linked to clipboard hijackers that replace copied wallet addresses, risking funds being sent to attackers. Reddit administrators paused the advertisements and initiated a security investigation after receiving reports, but the report did not clarify how the account was compromised or the extent of infections. No evidence was found of a breach of HBO Max's streaming service.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.