利用高調社交媒體帳戶的漏洞泵送比特幣價格

在一個具有里程碑意義的案件中，強調了備受矚目的社交媒體帳戶的脆弱性，阿拉巴馬州的26歲的埃里克委員會小被判處14個月監禁

A 26-year-old Alabama man has been sentenced to 14 months in prison for his role in a SIM swap attack that compromised the U.S. Securities and Exchange Commission’s (SEC) official X account and led to a false report of Bitcoin ETF approval.

一名26歲的阿拉巴馬州男子因其在SIM交換攻擊中的角色而被判處14個月徒刑，該攻擊損害了美國證券交易委員會（SEC）的X官方X帳戶，並導致了Bitcoin ETF批准的虛假報告。

Eric Council Jr., also known online as “Ronin” and “Agiantschnauzer,” was sentenced May 16 after pleading guilty earlier this year to one count of conspiracy to commit aggravated identity theft and access device fraud.

小埃里克議會（Eric Council Jr.

The SEC’s X account was compromised on January 9, 2024, when a post on the platform falsely announced the Commission’s approval of a spot Bitcoin ETF. At the time, then-SEC Chair Gary Gensler quickly rescinded the release, stating that the agency’s account had been “compromised.”

SEC的X帳戶在2024年1月9日被妥協，當時該平台上的一篇文章錯誤地宣布了該委員會對現場比特幣ETF的批准。當時，時任當時的主席Gary Gensler迅速取消了該釋放，並指出該機構的帳戶已被“妥協”。

Bitcoin’s price rose by more than $1,000 in minutes after the fake announcement, and then-SEC Chair Gary Gensler quickly rescinded the release, stating that the agency’s small business administration grant had been compromised.

虛假宣布後，比特幣的價格在幾分鐘內上漲了1,000多美元，當時擔任主席加里·蓋斯勒（Gary Gensler）迅速撤銷了該新聞稿，並指出該機構的小型企業管理贈款已被妥協。

The post was made by hackers who had gained control of the account by performing a SIM swap on the SEC’s phone number. To do this, Council used a counterfeit ID made by a handheld ID printer to pose as an AT&T customer and obtain a replacement SIM card.

該帖子是由黑客通過對SEC的電話號碼進行模擬交換來控制了該帳戶的。為此，理事會使用手持ID打印機製作的假冒ID作為AT＆T客戶，並獲得替換SIM卡。

Council, 26, of Mobile, Alabama, was part of a group who also used the password reset codes to gain access to the X account. These codes were generated when the SEC attempted to reset its own account password after noticing suspicious activity.

阿拉巴馬州莫比爾的26歲的理事會是一個小組的一部分，他們還使用密碼重置代碼來訪問X帳戶。當SEC在註意到可疑活動後試圖重置自己的帳戶密碼時，就會生成這些代碼。

During an FBI search of Council’s residence, agents discovered internet searches on his devices, including “How can I know for sure if I am being investigated by the FBI?”

在聯邦調查局對市議會居住地進行搜索時，特工在其設備上發現了互聯網搜索，包括“我怎麼能確定是否正在接受聯邦調查局的調查？”

The matter arose after the SEC had been applying to approve a number of exchange-traded products that track the price of Bitcoin.

SEC申請批准許多跟踪比特幣價格的交易所交易產品後，出現了此事。

Earlier this year, the SEC approved a number of spot Bitcoin exchange-traded products, adding 11 new ETFs such as Grayscale Bitcoin Trust and BlackRock’s IBIT.

今年早些時候，SEC批准了許多現貨比特幣交易所交易產品，增加了11種新ETF，例如灰比特幣信託和貝萊德的IBIT。

The move was a watershed for cryptocurrency investing, as it opened up regulated markets to products that directly track the price of the world’s largest cryptocurrency.

此舉是一個用於加密貨幣投資的分水嶺，因為它向直接跟踪世界上最大的加密貨幣價格的產品開放了受監管的市場。

Following the approval, several U.S. senators penned a letter to the SEC, raising concerns over the regulator’s handling of cryptocurrency and its potential impact on small investors.

批准後，美國幾位參議員寫信給SEC，引起了監管機構處理加密貨幣及其對小型投資者的潛在影響的擔憂。

In February, Council pleaded guilty in U.S. District Court in Washington, D.C., to conspiracy to commit aggravated identity theft and access device fraud.

2月，理事會在華盛頓特區的美國地方法院認罪，要求串謀實施嚴重的身份盜用和訪問裝置欺詐。

Prosecutors recommended a two-year sentence, while defense counsel sought a sentence of just over a year.

檢察官建議判處兩年徒刑，而辯護律師則要求一年多的判決。

The court ultimately imposed a 14-month term of imprisonment, to be followed by three years of supervised release.

法院最終判處14個月的監禁期，其次是三年監督釋放。

The judge also ordered Council to forfeit $50,000, barred him from dark web access and imposed an order to have no further identity fraud.

法官還命令理事會沒收50,000美元，禁止他進入黑暗的訪問權限，並命令沒有進一步的身份欺詐。

“Eric Council Jr.’s sentencing brings both the perils of hacking into social media and the instant market impact of misinformation,” said Charles Glassman, an attorney at legal firm Michelman & Sonnenberg.

法律公司Michelman＆Sonnenberg的律師查爾斯·格拉斯曼（Charles Glassman）說：“小埃里克委員會（Eric Council Jr.

“As finance becomes electronic, constant caution and judicial notice must be maintained to have faith in regulatory commissions and not have our institutions be subject to theft and fraud.”

“隨著財務變成電子的謹慎，必須保持謹慎和司法通知，以使其對監管委員會有信心，並且沒有我們的機構受到盜竊和欺詐的約束。”