TradingView Issues Alert Over YouTube Malware Trap Campaign

A new scam wave has emerged targeting TradingView users through YouTube, where cybercriminals are using hijacked channels to spread malware disguised as TradingView software. The platform issued a formal warning, urging users to remain cautious and avoid interacting with unofficial download sources.

YouTube Channels Used as a Weapon

The scam centers around YouTube channels that have been hijacked or stolen — often with verified badges and thousands of subscribers — to impersonate TradingView. These channels publish tutorials, live sessions, or promotional videos claiming to offer “enhanced” or “developer” versions of TradingView. In reality, the files promoted in these videos contain malicious code, often embedded in PowerShell commands.

Once executed, the malware installs a Remote Access Trojan (RAT) on the victims computer, giving attackers full control to steal credentials, especially for crypto wallets and trading accounts.

TradingViews Official Statement

TradingView clarified that it does not distribute its software through YouTube or any third-party websites. The only safe source for downloading its apps is its official website. The platform also emphasized that it never asks users to run scripts or command-line tools as part of installation — such requests are considered major red flags.

Impact and Cautionary Measures

Several users have already reported losses, including the theft of cryptocurrency assets. These fake videos are sophisticated: some even feature deepfake hosts, AI-generated comments, and graphics that mimic TradingViews branding.

In response, TradingView is collaborating with YouTube and law enforcement to remove these fraudulent channels. Users are urged to be highly skeptical of any unofficial TradingView content online, especially offers of cracked software or free premium features.

If you suspect youve been exposed to one of these scams, take the following actions immediately:

• Disconnect the affected device from the internet
• Perform a full malware scan
• Change passwords to all financial accounts
• Transfer any crypto funds to secure wallets
• Report the malicious content to YouTube for takedown