ClickFix attacks are deceiving Mac and Windows users through fake ads on Reddit, including a compromised HBO Max account, by displaying fake CAPTCHA prompts that trick users into pasting malware code into their terminal, instantly installing info-stealing malware that can access passwords and crypto wallets.