TREE NEWS update: Attackers hijacked HBO Max’s verified Reddit account and ran 108 malicious ads directing users to fake software downloads, in a campaign aimed at spreading crypto-stealing malware. The ads were posted through the streaming service’s official account before the takeover was addressed. The incident marks the latest abuse of a trusted brand account to distribute wallet-draining software.
HBO Max Reddit Account Hijacked to Push Crypto-Stealing Malware
The significance here is less the malware itself than the vector: a verified corporate account, not a spoofed one, lent the campaign its credibility. That shifts the risk from individual gullibility to platform-level account security, since followers have little reason to question posts from a brand they recognize. The affected parties are the account holder's reputation and any user who trusted the verification signal. Whether platform operators tighten verification-linked posting controls, or brands treat social accounts as security-critical infrastructure, is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.