A fresh crypto-stealing malware is masquerading within a TradingView Premium "cracked" version, according to a new report. The malware is being sold on subreddits related to crypto, specifically aiming at traders searching for access to premium functionality without costs.
Malware Disguised as TradingView Premium
Scammers are actively interacting with users, offering download links for "TradingView Premium Cracked" as per reports. Victims who install the software can have their crypto wallets drained and their identities used for phishing attacks.
Lumma Stealer and Atomic Stealer
The imitation software has two malware programs:
Lumma Stealer: Active since 2022, it focuses on crypto wallets and 2FA browser extensions.
Atomic Stealer: Found in April 2023, stealing admin passwords and keychain credentials.
The scammers are also marketing other fake trading programs on Reddit.
A Well-Planned Scam
In contrast to normal malware attacks, the scammers provide technical support, answering user complaints to make the scheme more believable. The file-hosting website was tracked to a Dubai cleaning firm, with the malware server registered in Russia last week. It is not surprising as AI-driven scams, stablecoin washing, and cybercrime cartels amounted to US$51 billion last year.
How to Stay Safe?
Download software only from authorized sources. Do not use cracked software that calls for security software to be turned off. Use strong security protocols, including hardware wallets and multi-factor authentication. As crypto crimes get more advanced, users need to remain proactive against such emerging threats.