Fake TradingView Premium download targets crypto wallets with Windows malware

A fake “cracked” version of TradingView Premium is being promoted as a way to obtain premium features without payment, but SlowMist has identified the associated Windows installer as malware. The security firm says the file is built to extract sensitive information rather than activate TradingView Premium, making the download an apparent route to compromising crypto holdings and other accounts. According to the coverage, the installer targets browser credentials, cryptocurrency wallet information and data associated with Telegram. Cryptopolitan also reports that the malware seeks private keys, browser logins and messaging sessions. TronWeekly attributes that behavior to the Windows infostealer, while CryptoPotato likewise says sensitive browser, wallet and Telegram information is collected before being transferred to remote servers. The three outlets corroborate the central warning: the promoted TradingView Premium crack is a data-theft scheme, not a usable premium unlock. Their additional detail varies. TronWeekly names @cryptotrice as the promoting X account, says it reached more than 300,000 viewers and reports that the malware exfiltrates captured data through WinINet to rotating command-and-control servers. Cryptopolitan supplies the estimated 18-month lifespan of the scam type, while CryptoPotato limits its account to the theft and remote-transfer behavior. No outlet reports a conflicting technical finding.

The reported scale makes the distribution method significant. A single promoted X post may have exposed more than 300,000 viewers to a malicious installer, while the broad target list links cryptocurrency theft with routine browser and messaging data. The emphasis on private keys and wallet data is particularly relevant to users who could have handled sensitive information on the same compromised Windows system.

The broader crypto market was comparatively subdued at the time of the warning. Total market capitalization was $2.56T, with the overall market described as flat, while Bitcoin was down 0.27% over 24 hours. The Fear & Greed index stood at 32, placing sentiment in Fear. The malware report itself concerns TradingView and Windows rather than a named cryptocurrency, so the figures provide market context without identifying a directly affected asset. The immediate points to monitor are any additional technical indicators or account disclosures from SlowMist and evidence of further circulation of the installer.