騙子過去一週冒充 Coinbase 詐騙用戶 170 萬美元

過去一周，至少有三名 Coinbase 用戶和一名加密用戶報告成為冒充 Coinbase 詐騙者的目標

Coinbase users have once again become a target for crypto-scammers, with at least four users reporting being contacted by scammers posing as Coinbase employees in the past week.

Coinbase 用戶再次成為加密貨幣詐騙者的目標，至少有四名用戶報告稱，過去一周冒充 Coinbase 員工的詐騙者聯繫了他們。

One victim, who shared their story with Edge & Node co-founder Tegan Kline on July 7, claims to have lost $1.7 million in a self-custody wallet after being tricked into sharing part of their seed phrase with a scammer.

7 月7 日，一名受害者向Edge & Node 聯合創始人Tegan Kline 分享了自己的故事，他聲稱自己被騙子與詐騙者分享了部分助記詞，結果在自己保管的錢包中損失了170 萬美元。

The victim said the scammer called them on July 6, claiming to be from Coinbase’s security team. During the call, the scammer sent the victim an email that appeared to be from Coinbase, which stated that the victim was “speaking to an official representative at Coinbase.”

受害者稱，詐騙者於 7 月 6 日給他們打電話，自稱來自 Coinbase 的安全團隊。在通話過程中，詐騙者向受害者發送了一封看似來自 Coinbase 的電子郵件，其中表示受害者正在「與 Coinbase 的官方代表交談」。

The scammer then claimed that the victim's wallet was “connecting directly with the blockchain,” which was causing transactions to come out of the wallet.

詐騙者隨後聲稱受害者的錢包“直接與區塊鏈連接”，這導致交易從錢包中流出。

The scammer also sent another email, which appeared to be from Coinbase and showed an outgoing transaction from the victim's wallet.

詐騙者還發送了另一封電子郵件，該電子郵件似乎來自 Coinbase，並顯示了受害者錢包中的一筆傳出交易。

The scammer directed the victim to a website and told them to enter their seed phrase to stop the transactions. The victim said they knew entering their seed phrase on the website “was not safe,” but they still went ahead and entered “a portion” of their seed phrase, without submitting it.

詐騙者將受害者引導至一個網站，並告訴他們輸入助記詞以停止交易。受害者表示，他們知道在網站上輸入助記詞“不安全”，但他們仍然繼續輸入助記詞的“一部分”，但沒有提交。

Hours later, the victim claimed that $1.7 million was drained from their self-custody wallet.

幾小時後，受害者聲稱 170 萬美元從他們的自助錢包中被盜走。

Hiro Systems CEO Alex Miller said that such websites “are capturing data as you enter it,” even without submitting it, and the victim’s partial reveal of their seed phrase was likely enough for “the bad guys [to] brute force the rest.”

Hiro Systems 執行長 Alex Miller 表示，此類網站“在您輸入數據時就會捕獲數據”，即使沒有提交數據，受害者部分洩露的助記詞很可能足以讓「壞人對其餘部分進行暴力破解」。

Miller also said that a scammer pretending to be from Coinbase contacted him recently using a similar scam. He believes his information may have been leaked in 2022 from CoinTracker’s email service provider database.

米勒還表示，一名冒充 Coinbase 的騙子最近使用類似的騙局聯繫了他。他認為他的資訊可能在 2022 年從 CoinTracker 的電子郵件服務提供者資料庫中洩露。

“Specifically, they were using the Coinbase API key connecting to CoinTracker to verify that they were me (in addition to other info),” he said. “At the very least cycle your API keys if you have been using CoinTracker.”

「具體來說，他們使用連接到 CoinTracker 的 Coinbase API 金鑰來驗證他們是我（以及其他資訊），」他說。 “如果你一直在使用 CoinTracker，至少循環使用你的 API 金鑰。”

On July 3, an X user with the handle “TraderPaul04” shared what they called a “pretty sophisticated” similar social engineering attempt by a fake Coinbase rep.

7 月 3 日，一位名為「TraderPaul04」的 X 用戶分享了一位假冒 Coinbase 代表的「相當複雜」的類似社交工程嘗試。

The scammer called TraderPaul and claimed that there was a login attempt on their account from a different city.

詐騙者致電 TraderPaul，聲稱有人嘗試從其他城市登入他們的帳戶。

TraderPaul said “an American male claiming to be a Coinbase employee” stated their full name and confirmed their email before claiming to have temporarily locked their Coinbase account and sending a fake password reset link with the aim of nabbing their account password.

TraderPaul 表示，「自稱是Coinbase 員工的美國男性」說出了自己的全名並確認了自己的電子郵件地址，然後聲稱暫時鎖定了自己的Coinbase 帳戶，並發送了虛假的密碼重置鏈接，目的是取得其帳戶密碼。

TraderPaul wasn't convinced and insisted on calling Coinbase customer service directly, adding the scammer “hung up” after failing to convince him not to.

TraderPaul 不相信，堅持直接致電 Coinbase 客戶服務部，並補充說，騙子在未能說服他不要這樣做後就「掛斷了電話」。

On July 7, another X user, “beanx,” posted that they also had a similar scam call with a fake Coinbase rep, who claimed that “someone attempted to login to my Coinbase.”

7 月 7 日，另一位 X 用戶「beanx」發文稱，他們也接到了一位假冒 Coinbase 代表的類似詐騙電話，該代表聲稱「有人試圖登入我的 Coinbase」。

Cointelegraph contacted Coinbase for comment but did not receive an immediate response.

Cointelegraph聯繫了Coinbase請其置評，但沒有立即收到回應。

Around $1.19 billion was lost to crypto security incidents in the first half of 2024, with over $900 million being stolen through phishing and seed phrase compromise attacks.

2024 年上半年，加密安全事件造成約 11.9 億美元損失，其中超過 9 億美元透過網路釣魚和助記詞外洩攻擊被竊。