GoKawiilHackers hijack HBO Max's Reddit account to spread ClickFix malware ads
Security researchers say attackers compromised HBO Max's official Reddit account and used it to post hundreds of fake ads linking to a lookalike site that runs a ClickFix scam. The scheme tricks visitors into copying and pasting a malicious command into their Terminal or Command Prompt, which silently installs info-stealing malware. Warner Bros. Discovery has not responded to requests for comment, and it's unclear how many users were affected.
GoKawiil's interpretation of the reporting above, not reported fact.
ClickFix attacks bypass traditional antivirus defenses because victims manually execute the malicious code themselves through legitimate system tools, making detection much harder. The use of a hijacked, trusted brand account on a major platform like Reddit shows how attackers are exploiting social trust and platform verification gaps to scale these campaigns rapidly.
- ClickFix scams trick users into pasting commands that install password- and crypto-stealing malware.
- Attackers used a compromised official HBO Max Reddit account to distribute hundreds of malicious ads.
- The attack method evades antivirus tools since victims run the malicious code themselves via terminal apps.
Source: techcrunch.com — Zack Whittaker, 2026-09-14
Published there as: “ClickFix attacks are tricking Mac and Windows users into hacking themselves”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.