Coinbase承諾$ 2000萬賞金捕獲比特幣BTC/USD勒索軟件攻擊者

Coinbase週四披露了一個涉及內部濫用和數據盜竊的物質網絡安全事件，導致了2000萬美元的比特幣BTC/USD贖金需求

Coinbase (NASDAQ:COIN) on Thursday disclosed a material cybersecurity incident involving insider abuse and data theft, leading to a $20 million Bitcoin (BTC/USD) ransom demand from a threat actor, which the company has refused to pay.

Coinbase（NASDAQ：COIN）週四透露了一項涉及內部濫用和數據盜竊案的物質網絡安全事件，導致威脅參與者的2000萬美元比特幣（BTC/USD）贖金需求，該公司拒絕支付。

Instead, Coinbase is placing a $20 million bounty for information leading to the arrest and conviction of the perpetrators.

取而代之的是，Coinbase為信息提供了一筆2000萬美元的賞金，以導致犯罪者被捕和定罪。

What Happened: Attackers were able to bribe overseas support contractors to exfiltrate internal documentation and personal user data, including names, contact details, masked bank and S.S.N data and government I.D.s, the company disclosed in a Form 8-K filing with the U.S. Securities and Exchange Commission on Monday.

發生了什麼：攻擊者能夠賄賂海外支持承包商，以剝奪內部文件和個人用戶數據，包括姓名，聯繫方式，蒙面銀行和SSN數據和政府ID，並於週一向美國證券交易委員會提交的表格8-K申請。

The breach affected less than 1% of monthly transacting users, according to the company.

據該公司稱，違規行為不到每月交易用戶的1％。

"We are not going to pay your ransom … Instead, we're putting out a $20 million award for any information leading to the arrest and conviction of these attackers," Coinbase CEO Brian Armstrong said in a blog post.

Coinbase首席執行官布萊恩·阿姆斯特朗（Brian Armstrong）在博客文章中說：“我們不會支付您的贖金……相反，我們為導致這些攻擊者逮捕和定罪的任何信息頒發了2000萬美元的獎勵。”

The CEO said the attackers went after weak links by targeting third-party customer support agents in foreign countries. While no passwords, private keys or funds were accessed, Armstrong noted the real threat of social engineering attempts using the leaked personal data.

首席執行官說，攻擊者通過針對國外的第三方客戶支持代理商來追求薄弱的聯繫。儘管未訪問密碼，私鑰或資金，但阿姆斯特朗指出，使用洩漏的個人數據造成了社會工程嘗試的真正威脅。

"They were able to find a few bad apples … this is still unacceptable," Armstrong said.

阿姆斯特朗說：“他們能夠找到一些壞蘋果……這仍然是不可接受的。”

Some of the compromised contractors had previously been flagged and terminated by Coinbase’s security systems.

一些妥協的承包商以前曾被Coinbase的安全系統標記並終止。

The company began receiving emails from the threat actor demanding a ransom of 50 Bitcoin (around $20 million) in return for decrypting data and halting further intrusions. The first email was received on May 11, and the company has been working with law enforcement.

該公司開始收到威脅參與者的電子郵件，要求贖金為50比特幣（約2000萬美元），以換取解密數據並停止進一步的入侵。第一封電子郵件於5月11日收到，該公司一直在與執法部門合作。

The affected customers were notified, and Coinbase will reimburse any user who lost funds as a direct result of the breach, Armstrong confirmed.

阿姆斯特朗證實，受影響的客戶已收到通知，Coinbase將償還任何損失資金的用戶。

Additional measures include relocating parts of the customer support operation to the U.S. and tightening internal access controls.

其他措施包括將客戶支持操作的一部分轉移到美國並收緊內部訪問控件。

The company has not experienced any material operational disruption but said it expects to incur expenses of $180 million to $400 million related to remediation and reimbursements.

該公司尚未遭受任何實質性操作中斷，但表示預計會產生與補救和報銷有關的1.8億至4億美元的費用。

See More: Best Cryptocurrency Scanners

查看更多：最佳加密貨幣掃描儀