Threat actors gained control over HBO Max's official Reddit account and used it to push malicious advertisements. These ads launched ClickFix attacks targeting Windows and macOS systems, resulting in infections by information-stealing malware. The campaign exploited the legitimacy of HBO Max's Reddit account to increase the likelihood of successful infections.

Users of HBO Max's official Reddit account were exposed to malicious ads that could infect their Windows and macOS devices with malware designed to steal sensitive information. This compromises user privacy and security, potentially leading to data theft and further exploitation.

There is no specific patch or vendor advisory available for this incident. Mitigation involves users avoiding interaction with suspicious ads on the compromised Reddit account and Reddit administrators restoring control and securing the HBO Max account. Users should ensure their endpoint security solutions are up to date to detect and block malware infections.