Live data from Hacker News

Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

cnbc.com

381–390 of 550 posts

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#381
post #245

Earlier quoted context omitted.

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

I never answer my phone, also turned off sound except alarms a couple years ago

What about while job hunting?

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#382
Given how little customer support agents in cheaper countries are paid, i'm surprised this type of serious attack has not happened sooner.

Corruption in these countries is extremely common. We're used to having a government that actually works in western countries. In these cheaper countries, bribes are routine and almost unavoidable.

Given the culture of corruption and how little the support agents are paid, it was only a matter of time before some bad actor tried to bribe them. Medical bills are expensive and need to be paid, making the agents highly vulnerable to this type of attack.

For many, the choice would be to accept the bribe, or let their sick child suffer from a treatable condition.

Now that a high profile attack has happened, expect copycat attacks from other bad actors.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#383

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

I have the exact same experience. I felt like I went back to a phone from 2018.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#384
post #148

Earlier quoted context omitted.

Watching crypto enthusiasts run into every problem that society already tackled with in the past when developing currency and its controls, and then coming up with solutions that look exactly the same as what dirty fiat currency uses, has been a source of much entertainment the past few years

> every problem that society already tackled with in the past More KYC creates more problems while solving some others. Why didn't the same society despite KYC/AML tackle the problem pointed at in a previous comment? "Florida teens kidnap Las Vegas man, drive him to Arizona desert, steal $4M in cryptocurrency"[1] Why is there this crime? Without mandatory KYC laws, this particular attack would be near pointless. No n…

Yea see the problem is that you are arguing under some implicit idea that you’ll just accept the results of the system.

Every single crypto property I’ve talked to has ended up at a point where they believes that someone cheated them outside the bounds of the system and then look to authority figures to rectify the situation, like the government.

If you are someone who actually believes that crypto transactions should be unmodifiable by any third party then what you said makes sense. I just don’t think that anyone telling me they believe that isn’t lying to themselves at best, and lying to everyone else at worst

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#385
post #368
post #207

Earlier quoted context omitted.

But hey, at least by being forced to give crypto exchanges all our personal details we're all super protected from the four horsemen: money laundering, drugs, terrorism and pornography.

No one is forced to use a "crypto exchange" in the first place.

or cryptocurrencies

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#386

Earlier quoted context omitted.

It’s my biggest gripe. They can pretty accurately flag a number as Spam or Telemarketing but in the “Silence Unknown Callers” setting I can only silence every single unknown caller. I can’t silence every single number that’s not in my contacts. When the plumber calls to confirm he’s in route, my phone needs to ring. Stuff like that.

it is super fucking easy. it has been a decade since I answered an unknown number. if plumber calls (and I dont have her/his number stored) it goes to voicemail. I then call known company number. The communication is always one-way, I call you. I never answer. You follow this one very simple rule and you good :)

Theres plenty of situations where this doesn't work. If you're called from a business central line and you don't know their extension you just call back and get the normal call tree which can take you forever to get through. Or if you're on the "cancellation list" for an appointment if they can't get through to you, they don't wait for you to call back, they just go on to the next person to schedule in their open slot.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#387

I have been receiving regular spear phishing calls from these guys, or someone who bought the leaked data, with classic tactics like claiming that I need to confirm a potentially fraudulent transaction. They speak perfect English with an American accent, sound very friendly, and have knowledge of your account balance. Thankfully on the first call I realized it was a scam right away, and Google's call screening featur…

If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…

Why is this such an issue with crypto?

Wealth status is often very well known for public figures and entrepreneurs. People are driving around in $200k cars.

Is it due to the liquidity of cryptocurrencies that $5 wrench attacks work better?

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#388
post #197

Earlier quoted context omitted.

I just switched to iPhone from a pixel device and I’m shook by all the spam calls. How do iPhone users deal with this?

Also, on TMobile if you dial #662#, it'll block the Scam Likely calls at the carrier.

Oh man. They start at 7AM and end around 4-5ish PM. I was hoping the war between Pakistan and India would make these stop. Jk obv. Nobody likes wars. But other than Tmobile are there similar methods for different providers? It can get so annoying. I did restrict calls from known numbers only.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#389

Earlier quoted context omitted.

If you had any significant assets on Coinbase at any time prior to this breach, spear phishing is the least of your worries. Coinbase not only leaked your full name and address, they also gave up your balances, your transaction history, and images of your government identification. People with "significant" crypto balances are being assaulted on the street and in their own homes, and family members are being kidnappe…

Why is this such an issue with crypto? Wealth status is often very well known for public figures and entrepreneurs. People are driving around in $200k cars. Is it due to the liquidity of cryptocurrencies that $5 wrench attacks work better?

It happens with cash sometimes but people are limited to the amount they can get out of an ATM where with crypto you can force someone to hand over all their wealth with a few keystrokes.

Re: Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom

#390
post #262

Earlier quoted context omitted.

Coinbase is identical to a bank because it holds customer funds. Your comment isn't quite the dunk you think it is. Blockchains allow money to be held anonymously without any banks involved. Centralized exchanges are just profiting on speculation and probably should be banned.

No they don’t. “Cryptocurrency” isn’t money at all. Just because you can trade it in for money, doesn’t make it so. I can also trade in my hat to the Buffalo Exchange for money. But my hat is not money.

Yeah, it would be more accurate to say that Coinbase is de facto a brokerage but does not have the same level of regulation as traditional brokerages. The result is the same though.
Post reply on HN