Slow Mist Confirms "Cracked TradingView Premium" as a Spyware Trojan

Slow Mist has detected that the "reverse cracked TradingView Premium" promoted by account @cryptotrice has been confirmed as a spyware trojan. This trojan has the capability to collect browser credentials, encrypted wallet information, and Telegram data on Windows systems, and it transmits data back to the C2 server via WinINet. The trojan utilizes Telegram and Steam to dynamically obtain and rotate C2 download sites. arche-hypnose.com is suspected of being a legitimate website that was compromised and used to distribute the trojan. The macOS link currently returns a 404 error, and Slow Mist has not yet obtained a sample. Slow Mist advises users who have used this software to immediately disconnect from the internet, transfer assets using a clean device, and change their mnemonic phrases.