The Cryptocurrency Post The CryptocurrencyPost
AboutContact
Security

SlowMist warns of a new “Cracked TradingView Premium” infostealer targeting crypto wallets

SlowMist has warned that a Windows sample distributed as a so-called “Cracked TradingView Premium” is in fact an infostealer that can take browser credentials, crypto wallet data and Telegram information, according to a post from the security firm.

The alert says the fake software has been promoted through an X account operating under the name “cryptotrice,” with the posts drawing substantial attention. SlowMist said the package requires users to download a password-protected archive and generate a license code through a key generator, a setup that may make the software look like a cracked or reverse-engineered product rather than malware.

In its warning, SlowMist said the download site itself has been compromised. It also said the malware’s command-and-control servers rotate through Telegram and Steam, a detail that suggests the operators are using multiple public-facing services to keep the infrastructure moving.

What SlowMist said users should watch for

SlowMist said the malicious sample is aimed at stored data on Windows systems, including browser-saved credentials and wallet information. The firm also said it included indicators of compromise and guidance for users who may already have run the file.

The warning is a reminder that software advertised as a cracked premium tool can still be used as a delivery mechanism for malware. In this case, the lure appears tied to TradingView, a widely used charting platform familiar to many crypto traders.

SlowMist’s alert does not indicate that TradingView itself was breached. The warning instead focuses on the distribution of a fake premium crack that the firm says is designed to steal sensitive data from users who install it.