HBO Max Reddit account hijacked to push malware
Malicious ads used a social engineering trick to infect Windows and macOS devices.
AI-assisted coverage comparison, editor-supervised · How this was made

HBO Max Reddit account hijacked to push malware
Photograph: TechCrunch (embedded from source)
What this story says
- Hackers compromised the official HBO Max Reddit account, using it to post malicious advertisements.
- The compromised account was used to launch 108 ads over about 48 hours, targeting Windows and macOS users.
- The ads employed a social engineering technique known as ClickFix, prompting users to copy and paste commands into their operating systems.
- Security researchers from Hudson Rock and ADAMnetworks analyzed the campaign, linking it to a larger operation called PasteSwitch.
Who covered it
Percentages are shares of the 4 outlets carrying a published leaning rating. 24 of the 28 outlets we know ran this story carry no rating and are not counted in them. Coverage measured .
Trust
42/100
Craft
61/100
Hype
41/100
28 sources · methodology
Hackers gained control of the official HBO Max Reddit account and used it to distribute malicious advertisements. These ads were designed to trick users into infecting their Windows and macOS devices with information-stealing malware through a technique called ClickFix. The compromised account posted approximately 108 such advertisements over a period of about 48 hours.
The ClickFix attack method involves social engineering, where users are prompted to copy and paste commands into their operating system's command line interface, such as Windows Run, PowerShell, or macOS Terminal. This action, performed by the user themselves, can bypass some security software. The advertisements, while sometimes impersonating HBO Max, also promoted fake AI tools, developer software, and macOS utilities, broadening the potential reach of the campaign.
Disagreement on response time
TechCrunch reported that Reddit stated it "recently learned that an HBO Max account authorized to run advertisements on Reddit was compromised and used to run ads containing malicious links," and that the company locked the account and removed the ads. Reddit did not specify how many users were targeted or clicked the ads. BleepingComputer noted that HBO and Warner Bros. Discovery had not responded to questions about the incident.
What the coverage left out
None of the reports printed below mention any specific number of users who clicked on the malicious ads or were ultimately compromised. TechCrunch noted it was unclear how many people were affected, and Reddit declined to provide figures when asked. Warner Brothers Discovery did not respond to requests for comment in the TechCrunch report.
Coverage settled. We checked this 201 times and stopped on 20 Sept 2026, 01:00. The figures above are what it finished at.
How other outlets pictured it
Which photograph to run is each newsroom’s own choice. The leaning beside a name is that outlet’s published rating, not a claim that the pictures divide along it. Every picture is shown from the outlet’s own server and links to the article it ran in.

HBO Max Reddit account hijacked to push malware
BleepingComputer — embedded from source
How each side covered it
Our own reading of the reporting listed below, written from the outlets’ articles rather than quoted from them. The reasoning is set out on our methodology page.
Left
1 rated outlet
- The left-rated reports led on the compromise of the HBO Max Reddit account and the subsequent distribution of malware. TechCrunch described how the ClickFix attacks trick users into hacking themselves, detailing the process of copying and pasting commands into system terminals. PC Mag also highlighted the hijacking of the HBO Max account as a method for spreading malware, noting the incident underscores the increasing use of ClickFix-style attacks.
Centre
3 rated outlets
- The centre-rated report from BleepingComputer focused on the technical details of the attack, identifying the number of malicious advertisements launched (108) and the duration (about 48 hours). It named the security researchers involved, Hudson Rock and ADAMnetworks, and linked the campaign to a larger operation called PasteSwitch. The report also detailed various malware families and attack chains used on both Windows and macOS systems.
Right
0 rated outlets
No outlet rated right ran this story. We watched the coverage until it stopped changing, and none appeared.
Questions about this coverage
- How did the left and right cover HBO Max Reddit account hijacked to push malware?
- Of the 4 outlets on this story carrying a published leaning rating, 50% are rated left, 50% are rated centre, 0% are rated right. Those percentages are shares of the rated outlets, not of every outlet that ran it, which was 28. The sections above set out what each side emphasised, in its own terms.
- Is HBO Max Reddit account hijacked to push malware left or right?
- Too few of the outlets on this story carry a published leaning rating to say. 4 of them do, and this site does not characterise a field under 12: at that size one newsroom filing moves the share by ten points. The percentages above are the count as it stands.
- Is the coverage of HBO Max Reddit account hijacked to push malware biased?
- HBO Max Reddit account hijacked to push malware is one event reported by 28 outlets, and this page does not rate the story as biased or unbiased. What it publishes is the spread: which outlets ran it, where named rating organisations place each of them on the spectrum, and what each side chose to lead with. A leaning rating describes an outlet's record over time, not this article, and the two should not be run together.
- Which outlets covered HBO Max Reddit account hijacked to push malware?
- 28 that we know of, every one of them listed further up this page with a link to its own report and to what we hold on the publisher. Nothing here is a summary of somebody else's summary: the outlets are named so the original reporting can be read.
- What happened when hackers compromised the HBO Max Reddit account?
- Hackers gained control of the official HBO Max Reddit account and used it to post 108 malicious advertisements over approximately 48 hours. These ads were designed to trick users into infecting their computers with information-stealing malware using a technique called ClickFix.
- How does the ClickFix attack work?
- ClickFix attacks use social engineering to trick users into copying and pasting commands into their operating system's terminal or command prompt. This action installs malware, often information-stealing types, and can bypass some security software because the user initiates the command execution.
- Which devices were targeted by the malware?
- The malicious advertisements distributed via the compromised HBO Max Reddit account targeted both Windows and macOS devices. The malware installed was designed to steal information from these systems.
Read it at the source
28 outlets, grouped by the leaning a published rating gives them. Every headline links to the original; an underlined outlet name opens our profile of that publisher.
Left
1Centre
3- HBO Max Reddit account compromised to serve ClickFix attacks (opens The Register in a new tab)
The Register — is The Register biased? Our profile of this outlet
- ClickFix attacks are tricking Mac and Windows users into hacking themselves (opens TechCrunch in a new tab)
TechCrunch — is TechCrunch biased? Our profile of this outlet
- Hackers hijack HBO Max Reddit account to push malware in ClickFix ads (opens BleepingComputer in a new tab)
BleepingComputer — is BleepingComputer biased? Our profile of this outlet
Right
0No outlet in this group ran the story.
Not rated
24- ClickFix Attack via HBO Max Reddit Account (opens Punto Informatico in a new tab)
Punto Informatico — is Punto Informatico biased? Our profile of this outlet
- ClickFix attacks are tricking Mac and Windows users into hacking themselves (opens OODA Loop in a new tab)
- HBO Max's Official Account in Reddit Suffers an Attack that Deceives Users to Install Malware (opens Business Insider (Spain) in a new tab)
Business Insider (Spain) — is Business Insider (Spain) biased? Our profile of this outlet
- A 'ClickFix' Attack Hijacks the Official HBO Max Account in Reddit and Gets Users to Hack Themselves (opens diarioestrategia.cl in a new tab)
diarioestrategia.cl — is diarioestrategia.cl biased? Our profile of this outlet
- A Reddit Account From HBO Max Compromise for Malvertising (opens Génération-NT in a new tab)
Génération-NT — is Génération-NT biased? Our profile of this outlet
- Worse, HBO Max's Official Account Was Used to Spread Malware on Reddit (opens Numerama in a new tab)
- Clicking These Fake HBO Max Ads Can Infect Your Computer (opens Pro Pakistani in a new tab)
Pro Pakistani — is Pro Pakistani biased? Our profile of this outlet
- HBO Max Account Taken Over by Hackers, Sending Malware to People (opens AntyWeb in a new tab)
Show 16 more
- Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz (opens Help Net Security in a new tab)
Help Net Security — is Help Net Security biased? Our profile of this outlet
- Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack (opens cybernoz.com in a new tab)
cybernoz.com — is cybernoz.com biased? Our profile of this outlet
- Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack (opens securityweek.com in a new tab)
securityweek.com — is securityweek.com biased? Our profile of this outlet
- ClickFix Attack Hijacks Official HBO Max Account in Reddit; Gets Users Hacking Themselves (opens El Economista in a new tab)
El Economista — is El Economista biased? Our profile of this outlet
- Hackers Hijack HBO Max Reddit Account to Push 108 ClickFix Malware Ads (opens Cyber Security News in a new tab)
Cyber Security News — is Cyber Security News biased? Our profile of this outlet
- Hackers Hijack HBO Max Reddit Account to Spread Malware Through Fake Ads (opens PhoneWorld in a new tab)
PhoneWorld — is PhoneWorld biased? Our profile of this outlet
- Using Official Accounts, ClickFix Type Attack Has Spread Across Reddit (opens MacMagazine in a new tab)
MacMagazine — is MacMagazine biased? Our profile of this outlet
- Hackers hijack HBO Max Reddit account to push malware in ClickFix ads | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting (opens National Cyber Security in a new tab)
National Cyber Security — is National Cyber Security biased? Our profile of this outlet
- Hackers Hijack HBO Max Reddit Account to Spread ClickFix Malware (opens mezha.net in a new tab)
- HBO Max Reddit account hijacked for ClickFix malware campaign (opens Tech Observer in a new tab)
Tech Observer
- ClickFix attacks are tricking Mac and Windows users into hacking themselves (opens IT Security News in a new tab)
IT Security News — is IT Security News biased? Our profile of this outlet
- ClickFix attacks are tricking Mac and Windows users into hacking themselves (opens technewstube.com in a new tab)
technewstube.com — is technewstube.com biased? Our profile of this outlet
- ClickFix Malware Is Going Viral, Infecting PCs And Macs With CAPTCHA Prompts (opens HotHardware in a new tab)
HotHardware — is HotHardware biased? Our profile of this outlet
- Compromised HBO Max Reddit Account Served PasteSwitch ClickFix Malware Ads (opens mallory.ai in a new tab)
mallory.ai
- HBO Max ads on a compromised Reddit account exposed a massive PasteSwitch ClickFix operation (opens infostealers.com in a new tab)
infostealers.com
- Fake CAPTCHA ClickFix malware hits 5,400 websites via Windows Run | Tech, Entertainment, Sport, Fashion, Travel News (opens thegne.online in a new tab)
thegne.online — is thegne.online biased? Our profile of this outlet
How did this read?
About the coverage, not about the story. We do not ask whether you agree with what happened — we have no honest use for that answer.
More in Media
All Media →Elsewhere on the site
Business & Economy•3 min readBinance Investigates Potential Security Issue; Funds Frozen
Business & Economy•3 min readPolymarket users lose funds after security breach
Science & Tech•4 min readChinese AI Model GLM-5.3 Completes Cyberattacks, Ignores Instructions
Conflict & Security•4 min readPentagon Fortifies Bases for 90 Days of Autonomy

