Home / Technology / AI Scams Steal Crypto via Fake TradingView
AI Scams Steal Crypto via Fake TradingView
9 Nov
Summary
- Scammers use fake TradingView Premium to steal private keys.
- Malware replaces wallet extensions, empties crypto wallets.
- Fake AI tools and cracked software spread infostealers.
A persistent scam campaign, active for about 18 months, is targeting cryptocurrency traders by distributing malware disguised as cracked versions of TradingView Premium and fake AI trading tools. Security firm SlowMist has identified an X account, "cryptotrice," promoting a "cracked" TradingView Premium that installs an infostealer capable of draining wallets and taking over messaging accounts.
These scams, previously advertised on platforms like Facebook Ads, Google Ads, and YouTube, now feature fake AI tools that deliver malware such as Needle Stealer. This malware infiltrates systems, replaces legitimate wallet extensions with malicious copies, and steals sensitive data including browser history, saved logins, and seed phrases from various wallet types.
As of November 2026, infostealer infections have surged by 27%, with millions of devices compromised and billions of credentials stolen. Common malware variants like Vidar and Lumma are prevalent, with Telegram increasingly used as a vector for spreading these tools, ironically, the same platform the malware aims to steal from.
