{"id":38740,"date":"2025-03-20T12:00:07","date_gmt":"2025-03-20T09:00:07","guid":{"rendered":"https:\/\/coinengineer.net\/blog\/?p=38740"},"modified":"2025-03-20T10:24:37","modified_gmt":"2025-03-20T07:24:37","slug":"beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside","status":"publish","type":"post","link":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/","title":{"rendered":"Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside!"},"content":{"rendered":"<p data-start=\"2546\" data-end=\"2890\"><strong data-start=\"2546\" data-end=\"2563\">Cybersecurity<\/strong> firm <strong data-start=\"2569\" data-end=\"2585\">Malwarebytes<\/strong> has issued a warning about a malicious version of <strong data-start=\"2636\" data-end=\"2659\">TradingView Premium<\/strong>, targeting crypto traders through <strong data-start=\"2694\" data-end=\"2704\">Reddit<\/strong> links. These cracked versions are laced with malware designed to steal personal data and empty <strong data-start=\"2800\" data-end=\"2818\">crypto wallets<\/strong>, according to <strong data-start=\"2833\" data-end=\"2850\">Jerome Segura<\/strong>, senior researcher at <strong data-start=\"2873\" data-end=\"2889\">Malwarebytes<\/strong>.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_71 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#Lumma_Stealer_and_Atomic_Stealer_Identified\" title=\"Lumma Stealer and Atomic Stealer Identified\">Lumma Stealer and Atomic Stealer Identified<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#Scammers_Engage_Directly_with_Victims\" title=\"Scammers Engage Directly with Victims\">Scammers Engage Directly with Victims<\/a><\/li><\/ul><\/nav><\/div>\n<h2 data-start=\"2892\" data-end=\"2943\"><span class=\"ez-toc-section\" id=\"Lumma_Stealer_and_Atomic_Stealer_Identified\"><\/span>Lumma Stealer and Atomic Stealer Identified<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"2944\" data-end=\"3160\">The malware includes <strong data-start=\"2965\" data-end=\"2982\">Lumma Stealer<\/strong>, active since 2022, which targets <strong data-start=\"3017\" data-end=\"3035\">cryptocurrency<\/strong> wallets and 2FA extensions. <strong data-start=\"3064\" data-end=\"3082\">Atomic Stealer<\/strong>, first identified in 2023, steals admin credentials and other sensitive data.<\/p>\n<hr \/>\n<p data-start=\"3162\" data-end=\"3207\"><strong><em>You Might Be Interested In: <a href=\"https:\/\/coinengineer.net\/blog\/elon-musk-talks-about-the-name-of-a-new-memecoin\/\">Elon Musk Talks About the Name of a New Memecoin!<\/a><\/em><\/strong><\/p>\n<hr \/>\n<h2 data-start=\"1277\" data-end=\"1333\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-151504 size-full\" src=\"https:\/\/coinmuhendisi.com\/blog\/wp-content\/uploads\/2025\/03\/tradingview.jpeg\" alt=\"TradingView\" width=\"878\" height=\"869\" \/><\/h2>\n<h2 data-start=\"3162\" data-end=\"3207\"><span class=\"ez-toc-section\" id=\"Scammers_Engage_Directly_with_Victims\"><\/span>Scammers Engage Directly with Victims<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p data-start=\"3208\" data-end=\"3447\">Scammers assist users in downloading and installing the fake software, building trust on <strong data-start=\"3297\" data-end=\"3307\">Reddit<\/strong> threads. <strong data-start=\"3317\" data-end=\"3333\">Malwarebytes<\/strong> traced the hosting website to a <strong data-start=\"3366\" data-end=\"3375\">Dubai<\/strong> cleaning company and found the command server registered in <strong data-start=\"3436\" data-end=\"3446\">Russia<\/strong>.<\/p>\n<p data-start=\"3488\" data-end=\"3671\">Users are advised to avoid cracked software requiring disabled security measures. The files are double-zipped and password-protected\u2014practices rarely seen in legitimate distributions.<\/p>\n<hr \/>\n<p data-start=\"3488\" data-end=\"3671\"><em>You can also freely share your thoughts and comments about the topic in the comment section. Additionally, don\u2019t forget to follow us on our\u00a0<a href=\"https:\/\/t.me\/coinengineernews\" target=\"_blank\" rel=\"nofollow noopener\"><strong>Telegram,\u00a0<\/strong><\/a><a href=\"https:\/\/www.youtube.com\/@CoinEngineer\" target=\"_blank\" rel=\"nofollow noopener\"><strong>YouTube<\/strong><\/a>,\u00a0and\u00a0<a href=\"https:\/\/twitter.com\/coinengineers\" target=\"_blank\" rel=\"nofollow noopener\"><strong>Twitter<\/strong><\/a>\u00a0channels for the latest\u00a0<a title=\"News\" href=\"https:\/\/coinengineer.net\/blog\/news\/\" data-internallinksmanager029f6b8e52c=\"7\">news<\/a>\u00a0and updates.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity firm Malwarebytes has issued a warning about a malicious version of TradingView Premium, targeting crypto traders through Reddit links. These cracked versions are laced with malware designed to steal personal data and empty crypto wallets, according to Jerome Segura, senior researcher at Malwarebytes. Lumma Stealer and Atomic Stealer Identified The malware includes Lumma Stealer,<\/p>\n","protected":false},"author":28,"featured_media":34103,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[657,2],"tags":[13264,7467,8154,4020,13267,13263,13261,13265,13262,13266],"class_list":["post-38740","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-en","category-news","tag-atomic-stealer","tag-crypto-security","tag-crypto-wallets","tag-cybersecurity","tag-digital-safety","tag-lumma-stealer","tag-malwarebytes","tag-reddit-scams","tag-tradingview-premium","tag-trojan-warning"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v22.6 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside! - Coin Engineer<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside! - Coin Engineer\" \/>\n<meta property=\"og:description\" content=\"Cybersecurity firm Malwarebytes has issued a warning about a malicious version of TradingView Premium, targeting crypto traders through Reddit links. These cracked versions are laced with malware designed to steal personal data and empty crypto wallets, according to Jerome Segura, senior researcher at Malwarebytes. Lumma Stealer and Atomic Stealer Identified The malware includes Lumma Stealer,\" \/>\n<meta property=\"og:url\" content=\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/\" \/>\n<meta property=\"og:site_name\" content=\"Coin Engineer\" \/>\n<meta property=\"article:published_time\" content=\"2025-03-20T09:00:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-03-20T07:24:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/12\/TradingView-Error-Sparks-Chaos-Bitcoin-Drops-by-4.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1080\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Yigit Taha OZTURK\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Yigit Taha OZTURK\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/\",\"url\":\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/\",\"name\":\"Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside! - Coin Engineer\",\"isPartOf\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/12\/TradingView-Error-Sparks-Chaos-Bitcoin-Drops-by-4.png\",\"datePublished\":\"2025-03-20T09:00:07+00:00\",\"dateModified\":\"2025-03-20T07:24:37+00:00\",\"author\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/5b75ba41894c1164f25378c9022397fc\"},\"breadcrumb\":{\"@id\":\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#primaryimage\",\"url\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/12\/TradingView-Error-Sparks-Chaos-Bitcoin-Drops-by-4.png\",\"contentUrl\":\"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/12\/TradingView-Error-Sparks-Chaos-Bitcoin-Drops-by-4.png\",\"width\":1920,\"height\":1080,\"caption\":\"TradingView Error Sparks Chaos Bitcoin Drops by 4%\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/coinengineer.net\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside!\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#website\",\"url\":\"https:\/\/coinengineer.net\/blog\/\",\"name\":\"Coin Engineer\",\"description\":\"Btc, Coins, Pre-Sale, DeFi, NFT\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/coinengineer.net\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/5b75ba41894c1164f25378c9022397fc\",\"name\":\"Yigit Taha OZTURK\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/3c58488c3e042b9f982e35ddee6f6e94f7d62613e8b36ebd312676655fab9908?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/3c58488c3e042b9f982e35ddee6f6e94f7d62613e8b36ebd312676655fab9908?s=96&d=mm&r=g\",\"caption\":\"Yigit Taha OZTURK\"},\"url\":\"https:\/\/coinengineer.net\/blog\/author\/ceyigitt\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside! - Coin Engineer","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/","og_locale":"en_US","og_type":"article","og_title":"Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside! - Coin Engineer","og_description":"Cybersecurity firm Malwarebytes has issued a warning about a malicious version of TradingView Premium, targeting crypto traders through Reddit links. These cracked versions are laced with malware designed to steal personal data and empty crypto wallets, according to Jerome Segura, senior researcher at Malwarebytes. Lumma Stealer and Atomic Stealer Identified The malware includes Lumma Stealer,","og_url":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/","og_site_name":"Coin Engineer","article_published_time":"2025-03-20T09:00:07+00:00","article_modified_time":"2025-03-20T07:24:37+00:00","og_image":[{"width":1920,"height":1080,"url":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/12\/TradingView-Error-Sparks-Chaos-Bitcoin-Drops-by-4.png","type":"image\/png"}],"author":"Yigit Taha OZTURK","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Yigit Taha OZTURK","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/","url":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/","name":"Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside! - Coin Engineer","isPartOf":{"@id":"https:\/\/coinengineer.net\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#primaryimage"},"image":{"@id":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#primaryimage"},"thumbnailUrl":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/12\/TradingView-Error-Sparks-Chaos-Bitcoin-Drops-by-4.png","datePublished":"2025-03-20T09:00:07+00:00","dateModified":"2025-03-20T07:24:37+00:00","author":{"@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/5b75ba41894c1164f25378c9022397fc"},"breadcrumb":{"@id":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#primaryimage","url":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/12\/TradingView-Error-Sparks-Chaos-Bitcoin-Drops-by-4.png","contentUrl":"https:\/\/coinengineer.net\/blog\/wp-content\/uploads\/2024\/12\/TradingView-Error-Sparks-Chaos-Bitcoin-Drops-by-4.png","width":1920,"height":1080,"caption":"TradingView Error Sparks Chaos Bitcoin Drops by 4%"},{"@type":"BreadcrumbList","@id":"https:\/\/coinengineer.net\/blog\/beware-of-cracked-tradingview-a-crypto-stealing-trojan-inside\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/coinengineer.net\/blog\/"},{"@type":"ListItem","position":2,"name":"Beware of Cracked TradingView: A Crypto-Stealing Trojan Inside!"}]},{"@type":"WebSite","@id":"https:\/\/coinengineer.net\/blog\/#website","url":"https:\/\/coinengineer.net\/blog\/","name":"Coin Engineer","description":"Btc, Coins, Pre-Sale, DeFi, NFT","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/coinengineer.net\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/5b75ba41894c1164f25378c9022397fc","name":"Yigit Taha OZTURK","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/coinengineer.net\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/3c58488c3e042b9f982e35ddee6f6e94f7d62613e8b36ebd312676655fab9908?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3c58488c3e042b9f982e35ddee6f6e94f7d62613e8b36ebd312676655fab9908?s=96&d=mm&r=g","caption":"Yigit Taha OZTURK"},"url":"https:\/\/coinengineer.net\/blog\/author\/ceyigitt\/"}]}},"_links":{"self":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/38740","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/comments?post=38740"}],"version-history":[{"count":2,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/38740\/revisions"}],"predecessor-version":[{"id":38742,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/posts\/38740\/revisions\/38742"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/media\/34103"}],"wp:attachment":[{"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/media?parent=38740"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/categories?post=38740"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/coinengineer.net\/blog\/wp-json\/wp\/v2\/tags?post=38740"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}