Fake HBO Max Reddit ads told Mac users to install their own malware
Researchers traced the campaign to HBO Max's verified account, turning a paid ad and a fake Mac download into an infostealer delivery path.
By Ryan Merket · Published
Primary source: TechCrunch
Why it matters
ClickFix lets attackers bypass normal download warnings by making the victim execute the malware. A verified brand account and paid ad placement make that instruction look routine.
A malicious advertising campaign impersonating HBO Max directed Reddit users to a counterfeit Mac download page, then instructed them to paste a command into Terminal that installed information-stealing malware.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.