#ParsedReport #CompletenessHigh
14-09-2026

HBO Max ads on a compromised Reddit account exposed a massive PasteSwitch ClickFix operation

https://www.infostealers.com/article/hbo-max-ads-on-a-compromised-reddit-account-exposed-a-massive-pasteswitch-clickfix-operation/

Report completeness: High

Actors/Campaigns:
Pasteswitch (motivation: financially_motivated)

Threats:
Clickfix_technique
Blitz_tool
Macc_stealer
Amos_stealer
Installfix_technique
Amatera_stealer
Animateclipper
Zigclipper
Clipboard_injection_technique

Victims:
Hbo max, Reddit, Cryptocurrency users

Industry:
Entertainment

TTPs:
Tactics: 3
Technics: 0

ChatGPT TTPs:
do not use without manual check
T1001.003, T1005, T1027, T1033, T1036, T1053.005, T1055, T1059.001, T1059.004, T1078.004, have more...

IOCs:
Domain: 128
Url: 1
IP: 14
Coin: 3
Hash: 63

Soft:
macOS, curl, Telegram, Twitter

Wallets:
trezor, exodus_wallet, mainnet

Crypto:
binance

Algorithms:
zip

Functions:
getData

Languages:
swift, powershell, javascript

Platforms:
apple, cross-platform, intel, x86