Hackers Use Verified HBO Max Reddit Account to Promote Crypto-Stealing Malware

Attackers took control of HBO Max’s verified Reddit account and used it to distribute advertisements linked to crypto-stealing malware, according to Decrypt. The campaign involved 108 malicious ads posted through the streaming service’s account. The advertisements directed Reddit users toward fake software downloads, creating a potential route for the malware to reach victims. The incident highlights how a verified social-media account can be misused to lend apparent credibility to harmful download links. Decrypt reported the activity on September 16, 2026. The source did not provide details about the value of any cryptocurrency stolen, the number of affected users, or the identity of those behind the account takeover. No market impact or specific digital asset was identified in the supplied report.