Hackers use fake ads on Reddit to spread malware to Windows and Mac users
Hackers compromised HBO Max's official Reddit account to post malicious ads that trick users into installing info-stealing malware.
The attack used a fake CAPTCHA or anti-bot prompt that looked real. When users clicked it, they were asked to copy and paste text into their computer's terminal or command prompt.
One keystroke installed malware that steals passwords, account access and crypto. The hackers broke into HBO Max's real advertising account on Reddit and posted hundreds of convincing fake ads.
Reddit locked the account and removed the ads. The company did not say how many users clicked the links.
This malware hides from antivirus tools because it runs in the terminal, where regular users rarely work.
- ClickFix
- Attack type
- Hundreds of fake but real-looking adverts
- Number of fake ads
Why it mattersAnyone using Reddit or other sites with hacked ads could fall victim and lose access to accounts and digital assets.
AustraliaAustralian computer and Mac users are at risk when browsing websites with hacked ads or visiting compromised sites.
✓ Claims checked against the source and corrected before publish. checked 5 d ago
