Fake TradingView Premium Cracked Version Spreads Infostealer Malware

• •A fake TradingView Premium version is spreading malware that steals sensitive data.
• •The campaign has been active since mid-October 2026 and has reached over 300,000 views.
• •Users are advised to avoid downloading unofficial software to prevent data theft.

Security firm SlowMist has identified a malicious campaign promoting a fake 'cracked' version of TradingView Premium, which has been active since mid-October 2026. The malware, disguised as legitimate software, is designed to steal sensitive user data, including cryptocurrency wallet information and Telegram credentials. The campaign, linked to an X account named 'cryptotrice', has garnered over 300,000 views. Users are tricked into downloading a password-protected archive that contains the infostealer, which can drain crypto wallets and capture browser logins. Other reports indicate that similar malware, like Lumma and Atomic Stealer, is also being distributed under the guise of cracked software. TradingView has repeatedly warned against downloading unofficial versions of its software, emphasizing that it does not offer cracked versions. Security experts recommend users avoid such downloads to protect their assets.