Malware Drains Crypto Wallets Via App

Malware in Cracked TradingView App Drains Crypto Wallets

• Scammers are distributing malware disguised as cracked TradingView Premium via Reddit.
• The malware targets both Mac and Windows users, using Lumma Stealer and Atomic Stealer (AMOS).
• AMOS exfiltrates data to a server in Seychelles, including passwords and two-factor authentication info.
• Victims have reported complete drainage of their cryptocurrency wallets.
• Scammers impersonate victims to spread phishing attempts through their contacts.
• $51 billion in illicit transaction volume was estimated by a blockchain analytics firm last year.

The malware, distributed on Reddit, has led to emptied crypto wallets by using Lumma Stealer for Windows and AMOS for Macs. The latter sends user data to a Seychelles server, contributing to the $51 billion illicit transaction volume last year.