{"id":369558,"date":"2026-05-28T04:12:48","date_gmt":"2026-05-28T11:12:48","guid":{"rendered":"https:\/\/cms-articles.softonic.io\/en\/?p=369558"},"modified":"2026-06-17T00:15:11","modified_gmt":"2026-06-17T07:15:11","slug":"reddit-posts-promising-free-tradingview-premium-are-installing-malware-on-your-device","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/reddit-posts-promising-free-tradingview-premium-are-installing-malware-on-your-device\/","title":{"rendered":"Reddit Posts Promising Free TradingView Premium Are Installing Malware on Your Device"},"content":{"rendered":"\n

Posts promising free access to TradingView Premium<\/strong> have been circulating across Reddit<\/strong> trading and crypto communities for several months. Many of the accounts behind them carry real karma, posting history, and activity patterns that read as legitimate. Comment threads fill quickly with positive responses; critical posts get buried or removed. Scams that advertise themselves are easy to catch. This one doesn\u2019t.<\/p>\n\n\n\n

Reports flagged in the r\/TradingView<\/strong> community describe posts appearing specifically in subreddits like r\/BestTrades<\/strong>, offering no-subscription, no-credit-card access to TradingView<\/strong>\u2019s paid tier. At every stage, the offer is built to pass visual inspection. Just a link, a few steps to follow.<\/p>\n\n\n\n

Those steps don\u2019t deliver TradingView<\/strong>. They deliver an infostealer built to pull credentials, session cookies, and crypto wallet data off the device without making a sound. Avast One Free Antivirus<\/strong><\/a> is designed to flag these downloads before they execute, which matters precisely because a threat this carefully assembled won\u2019t set off obvious alarms.<\/p>\n\n\n

\r\n
\r\n
\r\n
\r\n \"Avast\r\n <\/div>\r\n
\r\n Avast One Free Antivirus<\/span>\r\n DOWNLOAD<\/a>\r\n <\/div>\r\n
\r\n <\/path><\/path><\/text><\/svg>\r\n <\/div>\r\n <\/div>\r\n
\r\n <\/span>\r\n <\/div>\r\n
\r\n \r\n <\/div>\r\n <\/a>\r\n <\/div>\r\n<\/div>\n\n\n\n

How This Scam Is Built<\/h2>\n\n\n\n

The lure is well chosen. TradingView Premium<\/strong> covers advanced charting, real-time data, and multi-screen setups. Expensive enough that free access sounds worth a click. The posts target Reddit<\/strong>\u2019s crypto and trading communities, where the offer fits the audience.<\/p>\n\n\n\n

Accounts posting these don\u2019t look newly created. Months or years of Reddit<\/strong> history, karma, activity that reads as genuine. Positive comments land quickly under each post; warnings from real users tend to get buried. Multiple people have flagged this pattern in r\/TradingView<\/strong> specifically.<\/p>\n\n\n\n

From there, the link takes users off Reddit<\/strong> to a page designed to look like a standard software download. Files are usually compressed, password-protected, or packaged with an instruction that should stop the process immediately: disable your antivirus before installing<\/strong>.<\/p>\n\n\n\n

No legitimate software asks for that.<\/p>\n\n\n\n

What actually gets installed depends on the device. On Windows, the payload is Vidar<\/strong><\/a>. On Mac, AMOS<\/strong><\/a>. Both run silently and are built to collect:<\/p>\n\n\n\n