A takeover of HBO Max’s official Reddit account exposed users to 108 malicious advertisements over roughly 48 hours, including 46 themed around HBO Max. The verified u/hbomax account directed Mac and Windows users to imitation websites such as hbomaxx[.]us and hbomax-macos[.]com, where ClickFix instructions led victims to install MacSync and AMOS infostealers. The malware targeted browser credentials, saved passwords, Telegram data, Apple Notes and cryptocurrency wallet recovery phrases, while clipboard hijackers could replace copied wallet addresses with attacker-controlled ones. Reddit suspended the advertisements and opened a security investigation. The number of infections and any cryptocurrency losses have not been confirmed. Hudson Rock and ADAMnetworks linked the operation to PasteSwitch, a broader campaign active since early 2026 across multiple platforms.