cryptd.in

암호화폐 친화적인 인재를 위한 대체 링크드인

Security Firm Warns of Infostealer Posing as Cracked TradingView Premium

Security firm SlowMist has said that a cracked version of TradingView Premium promoted on X since mid-October is actually a Windows malware designed to steal sensitive information.

The lure was free access to paid charting features, with one of the posts pushing the free download passing more than 360,000 views.

How the Fake Premium Software Works

Cryptotrice, who identifies themselves on X as an on-chain dev, has been repeatedly promoting a guide to what they call a reverse-engineered TradingView Premium build, version 3.3.0, released in October.

In the posts, they asked users to download a password-protected archive, run the program, and click “generate” in a KeyGen window, a small tool that produces license keys. The guide claimed the build contained paid features such as 8 charts per tab and 400 price alerts and called the software “for educational purposes only.”

However, earlier today, SlowMist issued an alert saying the sample was an infostealer that collects browser login details and cryptocurrency wallet data as well as Telegram information before sending it to a command-and-control server through Windows’ WinINet interface.

While Cryptotrice had described the project as open source and pointed users to a GitHub repository, SlowMist discovered that the download link in the promotional articles did not lead to GitHub. And when one follower asked why the repository and Discord were only accessible through the local application, the promoter claimed that the repository had gone private and that links in the app expired after one use.

According to SlowMist, the malware uses Telegram and Steam to retrieve and rotate its command-and-control servers, with the download site, arche-hypnose[.]com, appearing to be an actual legitimate website that had been compromised to distribute the malicious file.

The security company said that even though it obtained and analyzed the Windows version of the product, the macOS link at the time of writing was returning a 404 error, meaning it couldn’t get any sample and could therefore not confirm whether that version also had the same malware.

Interestingly, when someone in the replies in one of the posts pushing the cracked TradingView Premium download asked Grok if it was safe, Cryptotrice responded, saying it was actually safer than the official TradingView “because absolutely no credentials (email, passwords, etc.) ever leave your system.”

What You Need to Do if You May Have Run the Program

For anyone who may have run the program, SlowMist says they should disconnect the affected machine from the network and move their assets to a clean device with a new wallet and seed phrase. They must also change the passwords for exchanges they use, as well as those of their browsers, emails, and Telegram accounts, including ending any of the messaging platform’s active sessions.

“Cracked software, KeyGens and password-protected archives are among the most common ways infostealers are distributed. Don’t install them,” the firm warned.

Last week, SlowMist issued another warning to iPhone users regarding DarkSword, an exploit it said was able to pull wallet files and recovery phrases from their mobile devices when they browsed compromised websites.

게시물 Security Firm Warns of Infostealer Posing as Cracked TradingView Premium 에 처음 등장 크립토포테이토.


댓글

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다

최신 피드

인기 카테고리

웹사이트 검색

인기 스토리

태그

#AlexeyPertsev (1) #BidenCryptoBan (1) #BidenElection (1) #BinanceVsCoinbase (1) #B비트코인 (458) #BitcoinETF (3) #B비트코인기초 (1) #B비트코인 취급 (1) #B비트코인가격 (5) #B비트코인가격수준 (1) #B비트코인펌프 (1) #B비트코인예치 (1) #B비트코인서지 (1) #BitcoinTop (1) #Bitfinex (1) #B비트 단위 (1) #브레이스브리지캐피털 (1) #BRC20토큰 (1) #BTC취득 (1) #B울리스틱 예측 (1) #BullishSentiment (1) #C중국광업 (1) #CPIP리뷰 (1) #CryptoAsset (2) #CryptoBattle (1) #CryptoBoom (1) #CryptoExpert (1) #CryptoInsights (1) #CryptoMania (1) #CryptoMarket (4) #CryptoPrediction (1) #CryptoPredictions (1) #CryptoRegulation (2) #CryptoTakeoff (1) #CryptoTiming (1) #CryptoTips (1) #CryptoTreasury (1) #CryptoUncertainty (1) #DerivativeJump (1) #Dogecoin (74) #DogecoinGains (1) #DogecoinVolume (1) #DutchCourt (2) #ECommerce (1) 1TP5테엘살바도르비트코인 (1) 1TP5테더리움 (74) 1TP5테더리움통증 (1) 1TP5테더리움가격 (1) 1TP5전문가 의견 (1) #FedRateCut (1) #FiatCurrency (1) #FinancialImpact (1) #FinancialPrivacy (1) #FirmShutdown (1) #FrozenAccounts (1) #IllicitFunds (1) #인플레이션데이터 (1) #투자 (1) #투자손실 (1) #일본기업 (1) #LegalAction (1) #LegalImpact (1) #법률 (1) #라이트닝 네트워크 (1) 1TP5시장분석 (3) 1TP5시장 모니터링 (1) 1TP5시장 예측 (1) 1TP5시장 예측 (1) #MarketProjection (1) 1TP5마켓지원 (1) 1TP5시장변동성 (1) #M결혼 (1) #MemeCoin (5) #MemeCoins (2) #M광부수익성 (1) #MoneyLaundering (2) #MtGox (4) 1TP5북한암호화 (1) 1TP5노보그라츠예측 (1) #P가격 마일스톤 (1) #P가격 예측 (2) #P가격 질문 (1) #PriceSurge (1) #P형량 (1) #QuantAnalysis (1) 1TP5규제압력 (1) #SEC안티크립토 (1) #ShibaInu (6) #SocialBuzz (1) 1TP5기술분석 (1) #Toncoin (3) #TornadoCash (3) #TornadoCashDev (1) 1TP5토네이도캐시개발자 (1) #UKCrypto (1) #업사이드 잠재력 (1) #USCongress (1) #와이오밍랜드 (1) #XRP가격 (1) #XRP업스윙 (1)

유용한 링크

유용하다고 생각되어 공유하고 싶은 링크.