Fake TradingView Apps Steal Crypto Wallets via Malware
Malware disguised as cracked TradingView apps is stealing crypto wallets and data, warns Malwarebytes.

- AMOS and Lumma malware spread via Reddit posts.
- Fake TradingView apps target crypto users.
- Malware steals personal data and crypto wallets.
Crypto investors are being warned about a new wave of information-stealing malware disguised as cracked versions of the popular TradingView application. According to cybersecurity firm Malwarebytes, these malicious files are being distributed via Reddit posts and are specifically aimed at individuals involved in cryptocurrency trading and investing.
How AMOS and Lumma Malware Work
Two major malware strains, AMOS and Lumma, are at the center of this attack. These types of information-stealing malware are designed to harvest sensitive personal data, including crypto wallet information, stored passwords, and browser history. What makes them particularly dangerous is their ability to remain hidden, posing as legitimate software, such as free or “cracked” versions of TradingView.
Once installed, the malware silently collects the victim’s data and transmits it to the attackers, who can then gain unauthorized access to crypto wallets, potentially draining funds without any immediate warning.
Stay Safe: Avoid Cracked Software and Use Security Tools
Cybersecurity experts are urging crypto users to avoid downloading software from unofficial sources, especially cracked versions of applications. Always verify the source and ensure that antivirus software is active and up to date.
Additionally, platforms like Reddit can be breeding grounds for these scams, as attackers use social engineering tactics to lure victims with tempting offers or misleading posts. Always be skeptical of too-good-to-be-true deals or free downloads in crypto forums.
Malwarebytes recommends scanning your devices regularly and being cautious about any app that requests access to sensitive data.