Reddit Infostealer Adverts
Reddit Infostealer Adverts Source: https://files.catbox.moe/q0ee7d.png
Reddit Infostealer Adverts
Description
Reddit Infostealer Adverts Source: https://files.catbox.moe/q0ee7d.png
Reddit Discussion
I was browsing Reddit and saw an ad displaying u/hbomax as the author - this advertised a macOS HBO Max app which I'd not heard of and was interested in. The user is verified and appears to have posted many times in the official HBO Max subreddits.
The advert takes you to hbomaxx[.]us which looks somewhat legitimate, and has a join button / download. Clicking these opens up the classic infostealer/clickfix paste this command to download. Having checked, this downloads an executable with other capabilities for account compromise (obviously all done in a full sandbox - inspecting the output only, not running anything).
My guess is that the reddit account is compromised - I did consider some sort of character substitution in the username but clicking it took me to the profile - but I'm trying to think if there is any other explanation for this as I'd be very surprised for it to actually be a HBO Max issue.
I've reported to Reddit / HBO but just interested in any viewpoints (My role is cybersecurity adjacent but not a technical specialist)
Screenshots:
https://files.catbox.moe/q0ee7d.png
https://files.catbox.moe/6nw1vc.png
https://files.catbox.moe/v1ycvm.png
Links cited in this discussion
Technical Details
- Source Type
- Subreddit
- cybersecurity
- Reddit Score
- 0
- Discussion Level
- minimal
- Content Source
- reddit_link_post
- Post Type
- link
- Domain
- null
- Newsworthiness Assessment
- {"score":38,"reasons":["external_link","newsworthy_keywords:infostealer","established_author","recent_news"],"isNewsworthy":true,"foundNewsworthy":["infostealer"],"foundNonNewsworthy":[]}
- Has External Source
- true
- Trusted Domain
- false
Threat ID: 6a9cc03eacd9273b49cea6bc
Added to database: 09/06/2026, 01:22:06 UTC
Last updated: 09/06/2026, 03:23:21 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.