Live data from Hacker News

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

cnbc.com

191–200 of 550 posts

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#191

Earlier quoted context omitted.

The Crypto industry continues their speedrun of rediscovering all of the reasons for why the global financial system exists. What you've described is the same thing that many Crypto enthusiasts call a "Bank"

except banks staff can easily be bribed too. There is plenty of bank fraud happening.

I can walk into a bank branch and show documents.

I guess I can walk downtown to CB HQ, but something tells me I won't get past the front desk.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#192

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

Scams have gotten better since AI. Most of the common spelling mistakes are gone.

I was looking through some phishing e-mails the other day out of curiosity and found a weird unicode character mistranslated. Immediately knew it was an artifact of bad translation. So they're not perfect, but they're damn good.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#193

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I started getting regular Coinbase login confirmation codes text messages with no attempts on my end

Same with my Microsoft account actually

I usually just ignore it but I assume someone is testing if my email can be used to login.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#194

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries.

Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification.

People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnapped for ransom.

"Significant" in this case can be $10k or less.

Until now, your best defense secrecy. Never talk about crypto in public in any way that could be traced to your real-world identity.

Thanks to Coinbase that defense is now gone.

The bad guys can see who has ever had a significant balance on Coinbase (even if they don't right now), whether that balance was sold for cash and how much, or if you've ever transferred tokens off the exchange to a self-custody wallet.

Now the bad guys know who's worth kidnapping for ransom and where you live. For most people, a Google search of your name and home address turns up the names of family members who would would also be lucrative targets for kidnapping and threats of violence.

Coinbase will never be forced to reimburse all the damage they've done because the true cost would bankrupt the company.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#195

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

I have my phone set to silence Unknown callers. What did you have setup on the Pixel before to block them?

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#196

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

iPhone user here. I put on airplane mode unless I'm making or expecting a call. Otherwise, I make it clear that email is my primary form of communication.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#197

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

Also, on TMobile if you dial #662#, it'll block the Scam Likely calls at the carrier.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#198
> Instead we are establishing a $20 million reward fund for information leading to the arrest and conviction of the criminals responsible for this attack.

I’m not usually a huge fan of crypto folks, but I applaud this.

I hope they are serious about paying the reward, and aren’t planning to rug-pull it.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#199

> Instead we are establishing a $20 million reward fund for information leading to the arrest and conviction of the criminals responsible for this attack. I’m not usually a huge fan of crypto folks, but I applaud this. I hope they are serious about paying the reward, and aren’t planning to rug-pull it.

I hope they are serious about paying the reward, and aren’t planning to rug-pull it.

They could always pay it in crypto.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#200

Whatever you think of Coinbase, this is a pretty good response IMO: > and will not pay the $20 million ransom demand we received. Instead we are establishing a $20 million reward fund for information leading to the arrest and conviction of the criminals responsible

I love it. This also would have been a great opportunity to break out of corporate speak for a moment for a good “Up yours hacker assholes!” Even us folks in the Bible Belt appreciate a well timed swear word here and there.
Post reply on HN