Hackers Hijack HBO Max Reddit Account to Distribute Crypto‑Stealing Malware

Security researchers discovered that a verified Reddit account associated with the streaming service HBO Max was compromised and used to spread malicious advertising. The attackers posted 108 ads that directed Reddit users to download fake software, which was engineered to steal cryptocurrency from victims.

How the Attack Was Executed

The compromised Reddit account was leveraged to publish advertisements that appeared legitimate to the platform’s audience. Each ad contained a link to a counterfeit download page. When users clicked the link and installed the software, it installed hidden components capable of extracting private keys and other crypto‑related credentials.

Impact on Users

Anyone who followed the malicious links and installed the fake software risked having their cryptocurrency wallets compromised. The campaign specifically targeted crypto holders, aiming to harvest assets directly from infected devices.

Response and Mitigation

HBO Max has not issued a public statement within the provided material. Users are advised to avoid downloading software from unverified sources, especially when prompted through social media ads, and to employ hardware wallets or multi‑factor authentication for added security.