Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

cnbc.com

Post reply on HN
Print view View original

201–210 of 550 posts

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#201

Post by conductr »

VectorLock wrote: post #190
modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

It’s my biggest gripe. They can pretty accurately flag a number as Spam or Telemarketing but in the “Silence Unknown Callers” setting I can only silence every single unknown caller. I can’t silence every single number that’s not in my contacts. When the plumber calls to confirm he’s in route, my phone needs to ring. Stuff like that.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#202

Post by ChrisMarshallNY »

reaperducer wrote: post #199
ChrisMarshallNY wrote: post #198

> Instead we are establishing a $20 million reward fund for information leading to the arrest and conviction of the criminals responsible for this attack. I’m not usually a huge fan of crypto folks, but I applaud this. I hope they are serious about paying the reward, and aren’t planning to rug-pull it.

I hope they are serious about paying the reward, and aren’t planning to rug-pull it. They could always pay it in crypto.

It might not be a bad idea for the various crypto exchanges to pool their resources into a non-denominational security organization. It could offer hardening services, and some kind of accreditation.

It would also make many Ponzi schemes easier to spot, as they wouldn’t want to contribute.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#203

Post by conductr »

dx4100 wrote: post #195
VectorLock wrote: post #190

Earlier quoted context omitted.

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

I have my phone set to silence Unknown callers. What did you have setup on the Pixel before to block them?

That’s too heavy handed for me. I get valid calls that I need to answer that aren’t in my contacts.

The calls they flag as potential spam and telemarketers has been 100% accurate in my experience so i wish I could just silence those

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#204

Post by taude »

modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I got probably three or four in the past week.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#205

Post by taude »

VectorLock wrote: post #190
modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

Yeup, I finally broke down went from Android -> IPhone 16 Pro. I like a lot about Apple's personal security policies for their consumers vs Google, but damn, I miss google's automatic call spam detection and management. All day long my Apple phone rings, and I just have to ignore the calls.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#206

Post by koakuma-chan »

VectorLock wrote: post #190
modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

If it’s says Rogers you know it’s a scam

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#207

Post by krunck »

panarky wrote: post #194
modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…

But hey, at least by being forced to give crypto exchanges all our personal details we're all super protected from the four horsemen: money laundering, drugs, terrorism and pornography.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#208

Post by J0nL »

ryuhhnn wrote: post #133
molticrystal wrote: post #121

And the reason Coinbase has to keep all that sensitive stuff, much more than what would be required to identify and authenticate you, which you hope will never be stolen, is because of know your customer laws, so you can thank your government that pictures of your passport got stolen and for whatever criminals and rogue Coinbase employees do with that info.

There are very good reasons for KYC, the problem here is not the government regulation, it's once again private companies being sloppy with their customer's data because sloppy is cheap and it's not their info on the line, it's yours, so there's little motivation for them to safeguard it _unless_ they're compelled to do it by law.

They're not just another free-to-use site where you're the product. Their reputation and viability are on the line.

For a site such as this the odds aren't in their favor anymore.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#209

Post by Kiro »

Ozarkian wrote: post #171
rtkwe wrote: post #93

Earlier quoted context omitted.

I also like 'last 4 digits only' as if that's not the most important parts and the part so many places use to validate your identity, the first 5 are just area and group so they're not exactly random.

Everyone's social security number is available. If you go download the leak referring to in this HN post [1], your SSN is certainly in it. Mine was, everyone in my family's was, almost all of my friends' were. The world needs to stop pretending that SSNs are secret. They aren't. [1] https://news.ycombinator.com/item?id=41248104

The world has stopped pretending a long time ago. In my country SSN is public information.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#210

Post by genghisjahn »

dx4100 wrote: post #192
modeless wrote: post #179

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

Scams have gotten better since AI. Most of the common spelling mistakes are gone. I was looking through some phishing e-mails the other day out of curiosity and found a weird unicode character mistranslated. Immediately knew it was an artifact of bad translation. So they're not perfect, but they're damn good.

The common spelling mistakes are there for a reason most of the time.
Post reply on HN