在過去兩個月中，Coinbase（Coin）用戶損失了超過6500萬美元的社會工程攻擊

Crypto Sleuth Zachxbt在周一的X帖子中說。 Zachxbt說，實際損失的數字可能會更高，因為金額不包括未報告的案件。

Coinbase (COIN) users lost over $65 million to social engineering attacks in the past two months, with an estimated $300 million lost to such attacks annually, crypto sleuth ZachXBT said in an X post Monday.

Crypto Sleuth Zachxbt在周一的X帖子中說，在過去兩個月中，Coinbase（Coin）用戶在過去兩個月內損失了超過6500萬美元的社會工程攻擊，估計每年損失了3億美元的攻擊損失的3億美元。

The actual figure lost might be higher, because the amount doesn't include unreported cases, ZachXBT said.

Zachxbt說，實際損失的數字可能會更高，因為金額不包括未報告的案件。

Coinbase has not publicly commented on the matter. When asked for a comment, it highlighted a primer on identifying and avoiding social engineering scams posted to its blog on Monday.

Coinbase尚未公開對此事發表評論。當被要求發表評論時，它強調了識別和避免在周一發佈到其博客上發布的社會工程騙局的入門。

Scammers utilize stolen personal data to deceive users by sending fake emails that mimic Coinbase's official communications, including false case IDs prompting users to transfer funds to scammer-controlled wallets, ZachXBT said.

Zachxbt說，騙子利用被盜的個人數據來欺騙用戶，通過發送模仿Coinbase官方通信的虛假電子郵件，包括促使用戶將資金轉移到騙子控制的錢包的虛假案例ID。

“Scammers clone the Coinbase site nearly 1:1 and allow the scammers to send different prompts to the target via spoofed emails using panels,” he noted. “The two main groups conducting these scams are skids from the Com and threat actors located in India both primarily targeting US customers.”

他指出：“騙子克隆了Coinbase站點將近1：1，並允許騙子通過使用面板通過欺騙的電子郵件向目標發送不同的提示。” “進行這些騙局的兩個主要小組是來自COM和位於印度的威脅行為者的滑行，這兩者都主要針對美國客戶。”

5/ They then sent a spoofed email which appeared to be from Coinbase with a fake Case ID further gaining trust. They instructed the victim to transfer funds to a Coinbase Wallet and whitelist an address while “support” verified their accounts security. pic.twitter.com/pOTQpnMfCz

5/然後他們發送了一封欺騙的電子郵件，該電子郵件似乎來自Coinbase，帶有假案例ID進一步獲得信任。他們指示受害者將資金轉移到Coinbase Wallet，並在“支持”驗證其帳戶安全性的同時，將資金轉移到Coinbase Wallet上。 pic.twitter.com/potqpnmfcz

“A Coinbase employee told people on X to stop using VPNs to avoid being flagged as suspicious. Meanwhile, threat actors will explicitly block VPNs from phishing sites,” ZachXBT wrote in the now-viral post. “This shows Coinbase's failure to diagnose the actual problem.”

“一位共同的僱員告訴X上的人們停止使用VPN，以免被標記為可疑。同時，威脅性參與者將明確阻止VPN從網絡釣魚站點中阻止VPN。 “這表明Coinbase無法診斷實際問題。”

ZachXBT advised Coinbase to enhance security by making phone number inputs optional, creating a restricted account type for new users, and improving community education on scam prevention.

Zachxbt建議Coinbase通過使電話號碼輸入可選，為新用戶創建受限制的帳戶類型，並改善預防騙局的社區教育，從而提高安全性。

UPDATE (Feb. 4, 15:57 UTC): Adds Coinbase's blog post on the topic in third paragraph.

更新（2月4日，15:57 UTC）：在第三段中添加了有關該主題的Coinbase博客文章。