Slow Mist Confirms "Cracked TradingView Premium" as a Spyware Trojan

Slow Mist has detected that the "reverse cracked TradingView Premium" promoted by account @cryptotrice has been confirmed as a spyware trojan. This trojan has the capability to collect browser credentials, encrypted wallet information, and Telegram data on Windows systems, and it transmits data back to the C2 server via WinINet. The trojan utilizes Telegram and Steam to dynamically obtain and rotate C2 download sites. arche-hypnose.com is suspected of being a legitimate website that was compromised and used to distribute the trojan. The macOS link currently returns a 404 error, and Slow Mist has not yet obtained a sample. Slow Mist advises users who have used this software to immediately disconnect from the internet, transfer assets using a clean device, and change their mnemonic phrases.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.