A sophisticated new scam threatens cryptocurrency investors. Counterfeit versions of TradingView are circulating on Reddit, concealing malware designed to steal digital assets.
Table of Contents
The lure of profit exploited by cybercriminals
Cryptocurrency holders face a new challenge threat. According to a recent alert from Malwarebytes, cybercriminals are actively distributing pirated versions of TradingView, the popular financial market analysis platform. These fraudulent versions promise free access to premium features, but in reality hide two dangerous pieces of malware: Lumma Stealer and Atomic Stealer.
These malware programs are specifically designed to steal users’ sensitive information. Jerome Segura, senior security researcher at Malwarebytes, confirmed in a report dated March 18 that several victims have already seen their cryptocurrency wallets completely emptied. The attack doesn’t stop there: criminals then impersonate victims to send phishing links to their contacts, creating a chain of infection.
Lumma Stealer active since 2022, mainly targets cryptocurrency wallets and browser extensions using two-factor authentication (2FA), while Atomic Stealer, discovered in April 2023, specializes in capturing administrator passwords and keychain data.
A perfected method of social engineering
The particularity of this attack lies in the active involvement of the crooks. They don’t just publish malicious links; they interact directly with users in Reddit threads, offering “technical assistance” to resolve problems installing the infected software.
This sophisticated method considerably increases the scam’s credibility. The publications specifically target subreddits dedicated to cryptocurrencies, where Mac and Windows users looking to save money are particularly vulnerable. Although the scammers mention that installation is “at your own risk”, they maintain the illusion of legitimacy by remaining active in the discussions.
The scam isn’t limited to TradingView: other fraudulent trading programs have also been identified on the platform, all designed to target Bitcoin and other cryptocurrency traders.
In the face of this growing threat, investors should adopt an attitude of systematic distrust towards any “too good to be true” offer. Premium software offered free of charge is almost always a potential danger.
As a journalist at Coinpri, I’ve been captivated by the world of bitcoin and blockchain since 2020. The decentralized aspect of Bitcoin particularly piqued my interest. Since then, I’ve been working constantly to spread my knowledge, hoping one day to see a world where everyone fully enjoys their financial freedom.
