Reddit Infostealer Adverts

This threat involves malicious advertisements on Reddit promoting a fake macOS HBO Max application hosted on a suspicious domain (hbomaxx[.]us). The application downloads an executable with infostealer capabilities designed to compromise user accounts. The advertisement was posted by a Reddit account appearing legitimate and verified, suggesting the account may have been compromised. The reporter analyzed the download in a sandbox environment without executing it and confirmed the presence of malware. The incident has been reported to Reddit and HBO Max for further action.

Users who interact with the malicious advertisement and download the offered application risk infection by an infostealer malware capable of compromising their accounts and potentially exfiltrating sensitive information. The use of a verified Reddit account to promote the malware increases the likelihood of user trust and successful infection.

The reporter has already reported the incident to Reddit and HBO Max. Users should avoid downloading applications from unofficial sources or suspicious advertisements, even if posted by verified accounts. Reddit and HBO Max should investigate the compromised account and remove the malicious advertisement. No official patch or fix applies as this is a social engineering and malware distribution campaign rather than a software vulnerability.