Hackers hijack HBO Max Reddit account to push malware in ClickFix ads
Summary
Hackers compromised the official HBO Max Reddit account to promote malicious ads. These ads, disguised as "ClickFix" promotions, targeted Windows and macOS users, leading to the installation of information-stealing malware.
IFF Assessment
The compromise of a major company's official account and the distribution of malware represent a direct threat to users and defenders.
Defender Context
This incident highlights the risk of social engineering and account hijacking, even for large organizations. Defenders should be aware of attackers leveraging legitimate platforms for malicious campaigns and the potential for compromised accounts to disseminate malware through seemingly innocuous ads or posts. Monitoring for unusual activity on official social media channels and implementing robust account security measures are crucial.