Crypto Traders Beware: This Fake TradingView Is Stealing Funds

Source Bitcoinist

A new threat is emerging from hackers who are disseminating hazardous software to Reddit users who are seeking free trading tools. Malwarebytes, a cybersecurity firm, has reported that scammers have installed malware in phony “cracked” versions of TradingView Premium. This malware has the potential to pilfer personal information and empty crypto wallets. Malwarebytes Senior security researcher Jerome Segura issued the warning in a blog post on March 18.

Victims Lose Crypto, Their Identity Gets Stolen

Segura reported that victims had their crypto wallets depleted and later impersonated by criminals who sent phishing links to their contacts. The attack employs a dual threat, in which two distinct malware programs, Lumma Stealer and Atomic Stealer, collaborate to infiltrate the computers of victims.

Atomic, which began operating in April 2023, targets administrator and keychain credentials, while Lumma has been operational since 2022 and concentrates on cryptocurrency wallets and two-factor authentication browser extensions.

Scammers Act Helpful While Spreading Malware

The manner in which the perpetrators interact with potential victims is what distinguishes this scam. The fraudsters are present on cryptocurrency subreddits, where they post links to what they claim are free “cracked” versions of premium financial graphing software for both Windows and Mac.

Segura observed in the blog post that the original poster’s involvement in the thread is intriguing, as they are “helpful” to users who are asking inquiries or reporting an issue. This additional effort to appear legitimate is instrumental in persuading a greater number of individuals to obtain the hazardous files.

Warning Signs Point To Malicious Software

The infected files exhibit distinct warning signs that users should be aware of, according to Malwarebytes’ analysis. Legitimate software does not employ the distribution method of double-zipped files with password protection, which is the case with the malware.

Another significant red flag is that the scammers frequently request that users disable their security software in order to execute the program. The poster’s helpful comments obscure the disclaimer that users download at their own risk, despite the fact that the post acknowledges this.

Crypto Crime Becomes More Professional

Meanwhile, the attack’s trail leads to unexpected locations. Malwarebytes discovered that the malware was hosted on a website owned by a cleaning company in Dubai, while the command and control server was registered in Russia approximately one week ago.

Chainalysis’s 2025 Crypto Crime Report describes a broader pattern in which crypto crime has “entered a professionalized era dominated by AI-driven schemes, stablecoin laundering, and efficient cyber syndicates.” This scam is part of this pattern. The report disclosed that illicit cryptocurrency transactions reached over $50 billion in the previous year.

Featured image from Gemini Imagen, chart from TradingView

Disclaimer: For information purposes only. Past performance is not indicative of future results.
placeholder
USD/JPY rises above 143.00 as Japanese Yen underperforms across the boardThe USD/JPY pair is up 0.25% to near 143.10 during European trading hours on Thursday. The pair trades firmly as the Japanese Yen (JPY) underperforms across the board.
Author  FXStreet
9 hours ago
The USD/JPY pair is up 0.25% to near 143.10 during European trading hours on Thursday. The pair trades firmly as the Japanese Yen (JPY) underperforms across the board.
placeholder
AUD/USD returns above 0.6500 amid broad-based USD weaknessThe Australian Dollar is trading higher for the second consecutive day on Thursday as US Dollar weakness offsets the impact of the downbeat Australian GDP figures seen on Wednesday, pushing the pair to one-week highs above 0.6500.
Author  FXStreet
10 hours ago
The Australian Dollar is trading higher for the second consecutive day on Thursday as US Dollar weakness offsets the impact of the downbeat Australian GDP figures seen on Wednesday, pushing the pair to one-week highs above 0.6500.
placeholder
Dogecoin Price Crash Below $0.2: 4H Order Block Shows Exactly What’s HappeningFollowing the Bitcoin price sweep down below the $104,000 level over the weekend, the Dogecoin price was pushed back down below $0.2 once again.
Author  NewsBTC
10 hours ago
Following the Bitcoin price sweep down below the $104,000 level over the weekend, the Dogecoin price was pushed back down below $0.2 once again.
placeholder
Trump has been trying to reach Xi for weeks, but China hasn't respondedDonald Trump says his connection with Xi Jinping should be enough to solve the US-China trade mess. But Xi hasn’t been taking his calls. For weeks, Trump tried reaching him and got nothing back.
Author  Cryptopolitan
10 hours ago
Donald Trump says his connection with Xi Jinping should be enough to solve the US-China trade mess. But Xi hasn’t been taking his calls. For weeks, Trump tried reaching him and got nothing back.
placeholder
US Dollar Index (DXY) remains depressed below 99.00 as recession fears returnThe US Dollar Index (DXY) is trading practically flat on Thursday, consolidating losses after a bearish reversal on Wednesday, as downbeat Services and employment data, coupled with the ongoing tariffs uncertainty, revived fears of an upcoming recession.
Author  FXStreet
10 hours ago
The US Dollar Index (DXY) is trading practically flat on Thursday, consolidating losses after a bearish reversal on Wednesday, as downbeat Services and employment data, coupled with the ongoing tariffs uncertainty, revived fears of an upcoming recession.
goTop
quote