Coinbase在对其最新数据泄露的调查发起调查后面临调查

美国司法部（DOJ）已经对Coinbase最近的数据泄露进行了调查，该数据泄露是世界上最大的加密货币交易所之一。

The U.S. Department of Justice (DOJ) has launched an investigation into a recent data breach at Coinbase (NASDAQ:COIN), one of the largest cryptocurrency exchanges, reports Bloomberg.

据彭博社报道，美国司法部（DOJ）已经对最大的加密货币交易所之一的Coinbase（NASDAQ：COIN）进行了调查。

According to the report, the department in charge of the probe is the criminal division of the DOJ, based in Washington. DOJ experts are working to establish what happened leading to the breach and who was involved.

根据该报告，负责调查的部门是位于华盛顿的司法部的刑事部。司法部专家正在努力确定导致违规和参与人员的事情。

Earlier this year, a group of cybercriminals was able to infiltrate Coinbase. Reports say these attackers bribed certain employees and contractors in India in order to obtain personal information from the company’s customers. This type of attack is known as social engineering because it focuses on tricking people instead of computer systems.

今年早些时候，一组网络犯罪分子能够渗透共同插曲。报告说，这些攻击者贿赂了印度的某些雇员和承包商，以便从公司的客户那里获得个人信息。这种攻击被称为社会工程，因为它专注于欺骗人们而不是计算机系统。

Following the attack, the criminals went on to demand a payment of $20 million from Coinbase. Threatening to make the data public, the criminals are said to have used a ransomware strategy to extort funds from the exchange.

袭击发生后，罪犯继续向Coinbase支付2000万美元。威胁要公开数据，据说犯罪分子已经使用勒索软件策略从交易所勒索了资金。

However, Coinbase ultimately declined payment and is now dealing with the fallout. According to a recent statement by the company, it is budgeting between $180 million and $400 million for the year to fix the problem. This will include repairing systems and reimbursing customers who were affected.

但是，Coinbase最终拒绝付款，现在正在处理后果。根据该公司最近的一份声明，该公司的预算在1.8亿至4亿美元之间，以解决该问题。这将包括维修系统和受影响的客户报销客户。

Compared to other exchanges, Coinbase has been largely immune to most problems. It is one of the last key players in the crypto world to be hit by a major cyberattack.

与其他交易所相比，共插基在很大程度上对大多数问题有所免疫。这是加密货币世界中最后一个受到主要网络攻击击中的主要参与者之一。

Additionally, similar attacks were recently targeted at other major exchanges like Binance and Kraken. However, no customer data was stolen at Binance or Kraken as they were able to stop the breaches before they could happen.

此外，最近在Binance和Kraken等其他主要交易所进行了类似的攻击。但是，没有客户数据在binance或Kraken上被盗，因为他们能够在发生之前停止违规行为。

To prevent the breaches, Binance had an automated machine learning system in place while Kraken had a team on call 24/7 to respond to any illegitimate activity. Both systems detected suspicious activity and were able to intervene quickly.

为了防止违规行为，Binance拥有一个自动化的机器学习系统，而Kraken则有一个全天候24/7的团队来应对任何非法活动。两个系统都检测到可疑活动，并能够快速干预。

This is in stark contrast to the Coinbase event which shows that social engineering is a rapidly growing threat. As hackers are becoming more adept at tricking people, they are pivoting their tactics and focusing less on breaking into computer systems. This means that businesses must work harder to train their staff and install robust security systems.

这与Coinbase事件形成鲜明对比，后者表明社会工程是一个迅速增长的威胁。随着黑客越来越擅长欺骗人们，他们正在旋转自己的策略，而不再专注于闯入计算机系统。这意味着企业必须更加努力地培训员工并安装强大的安全系统。

The incident at Coinbase shows that people are still the weakest link when it comes to cybersecurity. It also highlights the need for companies to take extra care when working with external contractors in various parts of the world. If the proper controls are not in place, allowing external users to have access can create more avenues for risk.

Coinbase的事件表明，在网络安全方面，人们仍然是最弱的联系。它还强调了公司在与世界各地的外部承包商合作时需要额外注意的需求。如果没有适当的控件，则允许外部用户获得访问可以创造更多风险途径。

As the investigation by the DOJ continues, Coinbase may face increasing pressure to improve the security measures used to protect its platform.

随着司法部的调查继续进行，Coinbase可能面临越来越多的压力，以改善用于保护其平台的安全措施。

However, both Binance and Kraken are being praised for their response to the same challenges. Their positive results show that having a strong plan for security and the ability to act quickly is essential for a business to be able to recover from a serious incident.

但是，binance和Kraken都因对同样挑战的反应而受到赞扬。他们的积极结果表明，对安全和快速行动的能力制定强大的计划对于企业能够从严重事件中恢复的能力至关重要。