Search
SlowMist Confirms "Cracked TradingView Premium" Contains Infostealer Trojan
22 hour ago /
Read about 0 minute
Author：小编
SlowMist analysis has confirmed that the Windows sample of the so-called reverse-engineered cracked version of TradingView Premium, promoted by X account @cryptotrice, is an infostealer Trojan. The Trojan is capable of harvesting browser credentials, cryptocurrency wallet data, and Telegram information, then exfiltrating it to a command-and-control (C2) server via WinINet. It also dynamically retrieves and rotates C2 download sites through Telegram and Steam. The domain arche-hypnose[.]com is suspected to have been compromised and used to distribute the Trojan. The corresponding macOS link currently returns a 404 error, and no sample has been obtained as of yet.
-
C114 Communication Network -
Communication Home
7 X 24 Track global technological trends
