ClickFix attacks are tricking Mac and Windows users into hacking themselves
Source: TechCrunch ↗
A wave of “ClickFix” attacks has emerged, targeting both Mac and Windows users who click on counterfeit HBO Max advertisements posted on Reddit. Security researchers from Hudson Rock and ADAMnetworks discovered that hackers hijacked the official HBO Max Reddit account to disseminate hundreds of fake ads that lead to malicious pages. These pages display a faux CAPTCHA or anti‑bot checkbox; when users click it, a prompt instructs them to copy a string of text into their system’s command line—Windows Command Prompt/PowerShell or macOS Terminal. Executing the command instantly installs information‑stealing malware capable of harvesting passwords, logged‑in accounts and cryptocurrency wallets, while evading many traditional antivirus solutions because the infection occurs via legitimate terminal commands.
The campaign illustrates a shift from earlier, rare ClickFix incidents that preyed on users searching for quick tech fixes to a coordinated, international effort exploiting trusted platforms. By compromising a legitimate brand’s Reddit presence, attackers increase the credibility of their lures, making ordinary users more likely to follow the instructions. Because the malicious code runs directly in the operating system’s shell, it bypasses typical security defenses; however, enterprise administrators can mitigate the risk by disabling terminal access across their domains, as suggested by researcher Kevin Beaumont. For macOS users, the open‑source tool BlockBlock offers additional protection against scripts that attempt to coerce users into running harmful commands.
The extent of the damage remains uncertain, as neither Warner Brothers Discovery—the owner of HBO—nor the affected Reddit community have provided figures on clicks or successful compromises. Researchers have posted details on Reddit’s cybersecurity subreddit, but the lack of official comment leaves the scope of the breach ambiguous. The incident underscores the growing sophistication of social‑engineering attacks that weaponize everyday command‑line interfaces, prompting both individuals and organizations to reassess how they secure terminal access and verify the authenticity of online advertisements.
⚡ Effects Interpreter
🌍World Economylow impact
What this means for you
- ▶Trading partners on the other side of the world might feel a distant nudge.
- ▶Cross-border money flows can subtly change direction after events like this.
🏙️Local Economylow impact
What this means for you
- ▶Prices at your local shops might feel a soft, indirect squeeze from this.
- ▶High street footfall and spending can shift subtly after this kind of news.
🏦Rates & Banksmedium impact
What this means for you
- ▶Extra security steps at your bank are a likely, if mild, side effect here.
- ▶Fraud cases can raise compliance costs, which banks sometimes pass on.
❤️Healthmedium impact
What this means for you
- ▶Unsettling news can weigh on sleep and mood, so peace of mind matters.
- ▶Day-to-day stress can creep up if this starts touching familiar routines.
💷Wealthmedium impact
What this means for you
- ▶Reporting anything suspicious quickly usually improves your chances of redress.
- ▶Fraud news like this is a good nudge to review your account alerts.
🏠Housinglow impact
What this means for you
- ▶Asking prices in the area could firm up or soften only gradually.
- ▶Surveyors and valuers tend to factor in wider trends gradually, not overnight.
🌍 Effects for your country
The U.S.'s central bank rate currently stands at 3.75%, so a global rates move like this could feed through to local borrowing costs. The U.S.'s economy is growing at 2.3% with inflation at 3.2%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track the U.S.'s own central bank rate closely. With the U.S.'s unemployment at 4.4%, personal-finance effects like this land on a labour market that is currently fairly stable. Health-system effects are harder to localise from economic indicators alone — the real impact in the U.S. depends more on local healthcare capacity than the figures above.
The UK's central bank rate currently stands at 3.75%, so a global rates move like this could feed through to local borrowing costs. The UK's economy is growing at 0.8% with inflation at 3.2%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track the UK's own central bank rate closely. With the UK's unemployment at 5.6%, personal-finance effects like this land on a labour market that is currently fairly stable. Health-system effects are harder to localise from economic indicators alone — the real impact in the UK depends more on local healthcare capacity than the figures above.
France's central bank rate currently stands at 2%, so a global rates move like this could feed through to local borrowing costs. France's economy is growing at 0.9% with inflation at 1.8%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track France's own central bank rate closely. With France's unemployment at 7.9%, personal-finance effects like this land on a labour market that is already under strain. Health-system effects are harder to localise from economic indicators alone — the real impact in France depends more on local healthcare capacity than the figures above.
Romania's central bank rate currently stands at 6.5%, so a global rates move like this could feed through to local borrowing costs. Romania's economy is growing at 0.7% with inflation at 7.8%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track Romania's own central bank rate closely. With Romania's unemployment at 6%, personal-finance effects like this land on a labour market that is currently fairly stable. Health-system effects are harder to localise from economic indicators alone — the real impact in Romania depends more on local healthcare capacity than the figures above.
The UAE's central bank rate currently stands at 3.65%, so a global rates move like this could feed through to local borrowing costs. The UAE's economy is growing at 3.1% with inflation at 2.5%, the backdrop this story's effects play out against locally. Housing-market effects like this are usually felt most where mortgage rates track the UAE's own central bank rate closely. Health-system effects are harder to localise from economic indicators alone — the real impact in the UAE depends more on local healthcare capacity than the figures above.