"Cracked TradingView Premium" infostealer targeting crypto wallets (SlowMist, Nov 2026)
- Scam type: Hack
- Reported: 2026-11-09
- Last updated: 2026-11-09
SlowMist reports that since mid-October 2026 the X account "cryptotrice" has repeatedly promoted a so-called "reverse-engineered cracked TradingView Premium," with some posts passing 300K views. SlowMist says the software requires downloading a password-protected archive and generating a license code via a KeyGen, and that the download link in the article does not point to GitHub despite open-source claims. SlowMist analyzed the Windows sample and confirmed it is an infostealer: it collects browser credentials, crypto wallet data and Telegram data and sends them to command-and-control (C2)…
Websites in this report: amanlay.org