HBO Max Reddit Account Hijacked to Distribute Malware

The official Reddit account of HBO Max was compromised earlier this month, leading to the distribution of 108 malicious advertisements over 48 hours. According to Hudson Rock, the attackers used a technique called ClickFix to lure users into executing malicious commands under the guise of a fake macOS application. The campaign, dubbed PasteSwitch, deployed information stealers such as MacSync and Atomic macOS (AMOS) to harvest browser credentials, Telegram data, and cryptocurrency wallet recovery phrases. The malware also utilized Binance Smart Chain contracts for command-and-control operations and clipboard hijacking.