Reported by 8 outlets

Timeline

1. original reporting

   PasteSwitch: 108 crypto-theft ads on a hijacked HBO Max Reddit account Attackers hijacked the official verified u/hbomax Reddit account and

   whack.sh · 29d ago · September 14th, 2026

   PasteSwitch: 108 crypto-theft ads on a hijacked HBO Max Reddit account Attackers hijacked the official verified u/hbomax Reddit account and

   via Mastodon https://whack.sh/news/pasteswitch-clickfix-operation

2. update from infostealers.com

   HBO Max ads on a compromised Reddit account exposed a massive PasteSwitch ClickFix operation

   infostealers.com · 29d ago · September 14th, 2026

   In September 2026, the cybersecurity community uncovered a massive, highly coordinated malvertising campaign leveraging the official, verified HBO Max Reddit account ( u/hbomax ). Over a frantic 48-hour period, the compromised account pushed 108 distinct “ClickFix” advertisements to users across the platform.

3. update from dev.to

   Attackers hijacked the verified u/hbomax Reddit account and ran 108 ClickFix ads in 48 hours, delivering fake crypto wallet apps and clipboa

   dev.to · 29d ago · September 14th, 2026

   Attackers hijacked the verified u/hbomax Reddit account and ran 108 ClickFix ads in 48 hours, delivering fake crypto wallet apps and clipboa

   via Mastodon https://dev.to/tuxxin/pasteswitch-108-crypto-theft-ads-on-a-hijacked-hbo-max-reddit-account-2a45

4. mentioned by whack.sh

   PasteSwitch: 108 crypto-theft ads on a hijacked HBO Max Reddit account Attackers hijacked the official verified u/hbomax Reddit account and

   whack.sh · 29d ago · September 14th, 2026

5. update from gbhackers.com

   HBO Max Reddit Account Hijacked to Spread PasteSwitch ClickFix Malware

   gbhackers.com · 29d ago · September 15th, 2026

   Threat actors hijacked HBO Max’s verified Reddit account, u/hbomax, and used its trusted advertising identity to distribute 108 malicious ClickFix advertisements in a coordinated 48-hour malvertising campaign. The operation, tracked as PasteSwitch, delivered platform-specific malware to macOS and Windows users, including information stealers, in-memory loaders, cryptocurrency clippers, and fake wallet applications. The campaign came to […] The post HBO Max Reddit Account Hijacked to Spread PasteSwitch ClickFix Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

6. update from malware.news

   HBO Max’s verified Reddit account hijacked to spread malware

   malware.news · 28d ago · September 15th, 2026

   Researchers at Hudson Rock found that cybercriminals hijacked HBO Max’s verified Reddit account and used it to run 108 malicious ads over roughly 48 hours. The ads used HBO Max’s trusted corporate account to promote fake AI tools, developer software, and macOS utilities, lowering potential victims’ guards. Some ads directed users to convincing HBO lookalike sites that claimed to offer a native HBO Max app for macOS or a promotional download. But instead of providing an installer, the sites instructed visitors to open Terminal on their Mac or, on Windows, the Run dialog or PowerShell, and paste in a command. This is the hallmark of a growing social engineering technique known as ClickFix . ClickFix attacks disguise malicious instructions as a routine technical step, such as fixing an error, completing a CAPTCHA, verifying that you are human, or installing software. A web page may silently copy a command to the clipboard , then guide the victim through pasting and running it, by which they will infect their own device. Researchers at ADAMnetworks have dubbed the operation behind the HBO Max ads “PasteSwitch.” Its infrastructure appears to tailor the next stage to the visitor’s device and the lure being u

7. update from www.hudsonrock.com

   HBO Max’s verified Reddit account hijacked to spread malware Indicators extracted from public reporting. Source: https://www. hudsonrock.com

   www.hudsonrock.com · 28d ago · September 15th, 2026

   HBO Max’s verified Reddit account hijacked to spread malware Indicators extracted from public reporting. Source: https://www.

8. update from tugatech.com.pt

   The HBO Max Reddit account was hacked, resulting in 108 malicious ads published in just 48 hours. The PasteSwitch operation enabled the attack.

   tugatech.com.pt · 27d ago · September 16th, 2026

   The HBO Max Reddit account was hacked, resulting in 108 malicious ads published in just 48 hours. The PasteSwitch operation enabled the attack. via Mastodon https://tugatech.com.pt/t91141-conta-da-hbo-max-no-reddit-hackeadapara-publicar-108-anuncios-com-malware

9. mentioned by www.it-connect.fr

   The official HBO Max Reddit account was hacked and used to distribute malware for 48 hours.

   www.it-connect.fr · 27d ago · September 16th, 2026