入门 HBO Max’s Official Reddit Account Hacked to Push Crypto Wallet Theft Ads
Quick answer
On September 17, 2026, threat actors compromised HBO Max’s official, verified Reddit account (r/HBOMax) and used it to publish 108 deceptive advertisements. These posts impersonated legitimate HBO promotions but embedded phishing links leading to fake wallet-connect interfaces. Victims who interacted were prompted to enter seed phrases or private keys — irreversible actions resulting in full wallet compromise. No HBO service outage occurred, but the breach exploited Reddit’s trust signals to bypass user skepticism.
How did the hackers gain access to HBO Max’s Reddit account?
According to the original report published on Wublock123 on September 17, 2026, the attackers likely exploited weak or reused credentials, possibly via a credential-stuffing attack or compromised third-party tool integration. HBO Max has not publicly confirmed the vector, but Reddit’s own security team later confirmed the account was verified and had two-factor authentication disabled at the time of compromise. This aligns with broader industry patterns: a 2025 Chainalysis study found that 63% of high-profile social media compromises involved disabled or misconfigured 2FA.
What specific tactics did the malicious ads use?
The 108 posts followed a consistent pattern: they mimicked HBO Max’s branding and referenced trending shows like The Last of Us or Succession, claiming ‘exclusive NFT drops’ or ‘early-access token airdrops’ tied to HBO content. Each ad linked to domains registered just hours before posting — including hbomax-nft[.]live and hbomax-airdrop[.]xyz, both flagged by CertiK’s Skynet on September 17. Crucially, none of the landing pages hosted actual smart contracts or blockchain interactions; instead, they displayed fake MetaMask popups requesting ‘wallet recovery phrase entry for verification’. As noted in the source, no legitimate platform ever asks users to input their 12- or 24-word seed phrase into a web form.
Who is most at risk — and how can users verify authenticity?
Users who follow entertainment-related crypto communities on Reddit — especially those searching for ‘NFT’, ‘airdrop’, or ‘free token’ — are disproportionately targeted. The HBO Max incident succeeded because its Reddit account carried the blue checkmark and over 2.1 million subscribers, lending false legitimacy. To verify authenticity: always cross-check announcements against HBO’s official Twitter/X (@HBOMax) and website (hbomax.com), never click shortened links (e.g., bit.ly or t.co variants used in 92% of these ads), and bookmark trusted crypto news sources like Cryptodlhub’s security alerts instead of relying on social feeds. For deeper protection, consider using hardware wallets like Ledger or Trezor — which never expose seed phrases to browsers.
Frequently asked questions
Did HBO Max lose any customer data during this incident?
No. According to the source report dated September 17, 2026, the breach was limited to HBO Max’s Reddit account. There is no evidence of database exposure, subscriber email leaks, or integration with HBO’s internal systems. All 108 malicious posts were removed within 47 minutes of detection, per Reddit’s incident timeline.
Can I recover funds if I entered my seed phrase on one of these fake sites?
No — recovery is technically impossible. Once a seed phrase is submitted to a phishing site, attackers instantly import the wallet and drain all assets. If this happened, immediately disconnect the compromised wallet from all dApps, revoke active approvals via Etherscan Token Approvals, and migrate remaining funds to a newly generated wallet. Do not reuse any part of the old seed phrase.
Risk warning and disclosure
Investing involves risk and market risk; official live rules always apply. Some outbound links may be affiliate links and we may earn a commission. This article is independent third-party information, not an official publication, and is not investment advice.
Related reading
Get started: Open the official download and registration page
Related News
入门 CFTC submits internal crypto framework to White House after CLARITY Act stalls
The CFTC sent a confidential policy briefing to the White House on September 18, 2026, following the collapse of bipartisan CLARITY Act negotiations. It i…
入门 Bitcoin Whale Moves $127M Worth of BTC to Kraken Exchange
A Bitcoin whale deposited 1,651.82 BTC — worth approximately $127 million — into a Kraken exchange wallet on September 18, 2026. Detected by Panewslab, th…
入门 Whale Moves 602 BTC to ETH in Three Days — What It Means for New Traders
A major cryptocurrency holder exchanged 602 BTC for ETH across multiple transactions within 72 hours, per on-chain analytics by Wublock123 (Sep 18, 2026).…
Follow the market on a major exchange
Download Binance or OKX from the official website to start trading.