クリプトドットイン

暗号に強い人材のためのオルタナティブ・リンクトイン

Security Firm Warns of Infostealer Posing as Cracked TradingView Premium

-

によって

クリプトドットイン
で

Security firm SlowMist has said that a cracked version of TradingView Premium promoted on X since mid-October is actually a Windows malware designed to steal sensitive information.

The lure was free access to paid charting features, with one of the posts pushing the free download passing more than 360,000 views.

How the Fake Premium Software Works

Cryptotrice, who identifies themselves on X as an on-chain dev, has been repeatedly promoting a guide to what they call a reverse-engineered TradingView Premium build, version 3.3.0, released in October.

In the posts, they asked users to download a password-protected archive, run the program, and click “generate” in a KeyGen window, a small tool that produces license keys. The guide claimed the build contained paid features such as 8 charts per tab and 400 price alerts and called the software “for educational purposes only.”

However, earlier today, SlowMist issued an alert saying the sample was an infostealer that collects browser login details and cryptocurrency wallet data as well as Telegram information before sending it to a command-and-control server through Windows’ WinINet interface.

While Cryptotrice had described the project as open source and pointed users to a GitHub repository, SlowMist discovered that the download link in the promotional articles did not lead to GitHub. And when one follower asked why the repository and Discord were only accessible through the local application, the promoter claimed that the repository had gone private and that links in the app expired after one use.

According to SlowMist, the malware uses Telegram and Steam to retrieve and rotate its command-and-control servers, with the download site, arche-hypnose[.]com, appearing to be an actual legitimate website that had been compromised to distribute the malicious file.

The security company said that even though it obtained and analyzed the Windows version of the product, the macOS link at the time of writing was returning a 404 error, meaning it couldn’t get any sample and could therefore not confirm whether that version also had the same malware.

Interestingly, when someone in the replies in one of the posts pushing the cracked TradingView Premium download asked Grok if it was safe, Cryptotrice responded, saying it was actually safer than the official TradingView “because absolutely no credentials (email, passwords, etc.) ever leave your system.”

What You Need to Do if You May Have Run the Program

For anyone who may have run the program, SlowMist says they should disconnect the affected machine from the network and move their assets to a clean device with a new wallet and seed phrase. They must also change the passwords for exchanges they use, as well as those of their browsers, emails, and Telegram accounts, including ending any of the messaging platform’s active sessions.

“Cracked software, KeyGens and password-protected archives are among the most common ways infostealers are distributed. Don’t install them,” the firm warned.

Last week, SlowMist issued another warning to iPhone users regarding DarkSword, an exploit it said was able to pull wallet files and recovery phrases from their mobile devices when they browsed compromised websites.

ポスト Security Firm Warns of Infostealer Posing as Cracked TradingView Premium に初登場した。 クリプトポテト.

コメント

コメントを残す

メールアドレスが公開されることはありません。 ※ が付いている欄は必須項目です

最新フィード

人気カテゴリー

ja 日本語
ja 日本語 en_US English ro_RO Română et Eesti ko_KR 한국어 ru_RU Русский de_DE Deutsch es_ES Español zh_CN 简体中文 fr_FR Français zh_TW 繁體中文 pt_PT Português it_IT Italiano pl_PL Polski tr_TR Türkçe nl_NL Nederlands id_ID Bahasa Indonesia el Ελληνικά uk Українська bg_BG Български cs_CZ Čeština fi Suomi hu_HU Magyar lv Latviešu valoda lt_LT Lietuvių kalba nb_NO Norsk bokmål sk_SK Slovenčina sl_SI Slovenščina sv_SE Svenska

ウェブサイトを検索

人気記事

タグ

#AlexeyPertsev (1) #Bidenクリプトバン (1) #Biden選挙 (1) #BinanceVsCoinbase (1) #ビットコイン (458) #BitcoinETF (3) #ビットコイン基礎知識 (1) #ビットコインの取り扱い (1) #Bビットコイン価格 (5) #BitcoinPriceLevel (1) #BitcoinPump (1) #BitcoinReserve (1) #ビットコイン・サージ (1) #Bitcoinトップ (1) #Bitfinex (1) #ビットワイズ (1) #BracebridgeCapital (1) #BRC20トークン (1) #BTC取得 (1) #Bullish予測 (1) #Bullishセンチメント (1) #中国鉱業 (1) #CPプレビュー (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #クリプトマニア (1) #CryptoMarket (4) #CryptoPrediction (1) #Crypto予測 (1) 1TP5トリプトレギュレーション (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty（暗号の不確実性 (1) #Dデリバティブジャンプ (1) #Dogecoin (74) #Dogecoinゲイン (1) #Dogecoinボリューム (1) #ダッチコート (2) #ECコマース (1) #ElSalvadorビットコイン (1) #Ethereum (74) #EthereumPain (1) #EthereumPrice (1) 1TP5専門家の意見 (1) #Fedレートカット (1) #FiatCurrency (1) #フィナンシャル・インパクト (1) #フィナンシャル・プライバシー (1) #Firmシャットダウン (1) #F凍結アカウント (1) 1TP5自己資金 (1) #InflationData (1) 1TP5投資 (1) 1TP5投資損失 (1) #日本ファーム (1) #法的措置 (1) 1TP5法的影響 (1) #法律 (1) #LightningNetwork (1) #市場分析 (3) #Mマーケットモニタリング (1) #M市場予測 (1) #市場予測 (1) #M市場予測 (1) #Mマーケットサポート (1) #マーケットボラティリティ (1) #マリッジ (1) #MemeCoin (5) #Memeコイン (2) #Miner収益性 (1) #マネーロンダリング (2) #MtGox (4) #北朝鮮暗号 (1) #ノボグラッツ予想 (1) #Priceマイルストーン (1) #P価格予測 (2) #Price質問 (1) #プライスサージ (1) #Prisonセンテンス (1) #QuantAnalysis (1) 1TP5規制圧力 (1) #SECアンチクリプト (1) #ShibaInu (6) #SocialBuzz (1) #技術分析 (1) #トンコイン (3) #トルネードキャッシュ (3) #TornadoCashDev (1) #TornadoCashデベロッパー (1) #UKクリプト (1) #Upsideポテンシャル (1) #USCongress（米国議会 (1) #ワイオミングランド (1) #XRP価格 (1) #XRPupswing (1)

お役立ちリンク

私が役に立ち、共有したいと思ったリンク