Scammers Hijack YouTube to Lure TradingView Users into Malware Traps

Scammers targeted the TradingView community with fake YouTube channels designed to trick users into downloading malware. According to the charting platform, these deceptive channels are expertly designed to impersonate TradingView.

TradingView has issued an urgent warning for users to only engage with its official YouTube presence to avoid falling victim to these scams. Recently, fake YouTube channels masquerading as official TradingView accounts have surged in popularity, preying on the platform’s user base.

The Growing Threat of Fake Channels

These fraudulent channels reportedly utilize stolen or hijacked accounts with verified badges and a considerable number of subscribers. By creating seemingly legitimate content, such as livestreams or tutorial videos, they lure unsuspecting viewers into downloading what is falsely advertised as the “developer version” of TradingView or a “cracked” paid application.

“Scammers create convincing YouTube channels that appear to be official TradingView accounts, often using stolen or hijacked channels with large subscriber bases and verified badges,” the platform explained.

In reality, the files linked in these videos contain malicious scripts, usually a Windows PowerShell command, that, when executed, install a Remote Access Trojan (RAT) onto the victim’s device.

This malicious software gives cybercriminals unauthorized access, enabling them to steal sensitive information, including cryptocurrency wallet credentials, and drain the victim’s funds.

How to Stay Safe from Scams

The impact of these scams has reportedly been devastating for many TradingView users. Victims have reported losing access to their cryptocurrency wallets after following instructions from these fraudulent channels. Scammers go to great lengths to make their content appear credible, often using deepfake personalities, positive fake comments, and mimicking TradingView’s actual content.

To protect against scams, TradingView is now urging users never to download its software from any third-party source. The only official apps, including the mobile and desktop versions, are available directly on the TradingView website.

The company also mentioned that it will never ask users to run PowerShell or command-line scripts to install its platform; such requests should be treated as major red flags. Another key tactic used by scammers is offering “too good to be true” deals, like free access to premium features or giveaways.

Safety Guidelines for Users

TradingView is reportedly collaborating with YouTube and law enforcement agencies to identify and remove fraudulent channels. The firm also asked victims to disconnect their devices from the internet and run a thorough malware scan.

Change all passwords, especially for any cryptocurrency wallets or trading accounts, and notify your wallet provider. Consider transferring your funds to a secure wallet to safeguard your assets.

Source