Security Alert: So-called "TradingView Premium cracked versions" pose a risk of data theft; do not download or run unknown installation packages.

BlockBeats news, November 8 — According to a security report previously released by Malwarebytes, attackers used "TradingView Premium cracked version" as bait to spread the Lumma infostealer trojan to Windows users and Atomic Stealer (AMOS) to Mac users, stealing personal data and crypto wallet information, with some victims reporting their wallets were emptied. Security firm Hexastrike also documented similar attacks in a 2026 report, with the Windows payload being Vidar and the Mac payload still AMOS. The attackers used password-protected archives to hinder automated scanning and lured users into installing via claims of so-called free, lifetime-unlocked Premium access.

Recently, similar promotional posts on Platform X for a so-called "reverse-engineered cracked version of TradingView Premium" asked users to download password-protected archives, run a KeyGen, and claimed that VirusTotal scan results were updated daily on GitHub. Some users in the comments reported antivirus alerts, but the available material is not yet sufficient to confirm the specific trojan type in the installer provided by that post. The author claimed the project is open source on GitHub, but the download link provided in the article did not point to GitHub; the author also stated in some tweet comment sections that the repository had been made private and that the relevant link could only be obtained within the app and would expire after a single use.

TradingView officially reminded users earlier not to download so-called "cracked," "developer," or "hacked" versions. Official desktop and mobile apps are provided only through the official website and official app stores, and downloads promising free Premium access may contain malware that steals data.