SlowMist confirms that a sample of fake TradingView Premium software for Windows is an information-stealing trojan. The software was promoted in a post by the X account @cryptotrice as a cracked Premium version.

According to SlowMist's analysis, the trojan collects browser login credentials, crypto wallet data, and Telegram data, then sends the data to a command-and-control server via WinINet. The malware uses Telegram and Steam to automatically obtain and change the command-and-control server address.

The download page arche-hypnose[.]com is suspected to be a legitimate website that was compromised to distribute a trojan. The link to download the macOS version currently returns a 404 error, so SlowMist has not yet been able to obtain a sample for analysis.

SlowMist advises anyone who ran the software to disconnect from the network, use a clean device to transfer their assets, and change their wallet recovery phrase. Users should also change their passwords for their browser, exchange accounts, email, and Telegram, and terminate any active Telegram sessions.

Source: https://tintucbitcoin.com/slowmist-xac-nhan-ban-crack-tradingview-premium-chua-ma-doc-danh-cap-du-lieu/

Thank you for reading this article!

Like, Comment, and Follow TinTucBitcoin to stay up to date with the latest cryptocurrency market news and never miss any important information!

$BTC $ETH $BNB $XRP $SOL