Hacked HBO Reddit Account Used for Malware Delivery via ClickFix Attack

Hackers compromised HBO Max's official Reddit account and posted 108 malicious ads over 48 hours as part of the PasteSwitch campaign. macOS and Windows users were lured to a fake site hbomaxx.us, where ClickFix prompted them to paste a command into the terminal to install malware.

• 108 malicious ads posted over 48 hours via u/hbomax account
• On macOS, curl | zsh commands delivered MacSync and AMOS Helper
• On Windows, MSHTA and PowerShell installed Amatera Stealer
• AnimateClipper and ZigClipper replaced crypto wallet addresses