Malware in Cracked TradingView App Has Been Draining Crypto Wallets

Scammers use cracked versions of TradingView Premium to remove crypto portfolios.

The app is disguised as a “cracked” version of the real HandelsView PremiumApp. Downloads from the malware Printed versions are distributed via Reddit and are often found in cryptocurrency sub Reddits.

Victims have reported that their entire crypto portfolios were empty. They were then proposed by the scammers who used their data to send phishing attempts that encourage the contacts of the victims to download and install the infected app.

Once downloaded, on Mac or Windows, the software unleashes the built -in malware in the form of Lumma Stealer for Windows and Atomic Stealer (AMOS) on Mac.

Analysis of the code shows that the AMOS attack user data exfiltrates to a server hosted in the Seychelles. This data contains passwords and 2FA information.

To bypass the security on Macs, the scammers have actively hired contact with users by introducing themselves as customer service to ‘help’ them installed the software. This includes advice on disabling certain security protocols that would otherwise protect them against these types of attacks.

An attacker wrote on a Reddit message: “That” Apple couldn’t verify “warning is just that Apple is extra careful … don’t worry – a real virus on a Mac would be wild, and I have never seen anyone sneaking through it!” This was followed by instructions on how to open the malware despite the efforts of the Mac to stop.

Amos attacks Macs and can steal personal references, while Lumma Stealer, who has been around since 2022, focuses on cryptocurrency portfolios and two-factor authentication trowservert tensions.

Jérôme Segura, a senior security researcher at Malwarebytes, wrote in a blog post: “What is interesting with this specific schedule is how involved the original poster is.”

Although this is a slightly more direct approach, this kind of crime is not new. Blockchain Analytics firm chainalysis estimates that there was $ 51 billion in illegal transaction volume in the past year.

Published by Stacy Elliott.