Coinbase透露，这是海外客户代表的社会工程攻击的目标

Coinbase透露，最近的安全漏洞涉及其用户群的一小部分是针对性的社会工程攻击的结果。该公司表示，犯罪分子试图获取客户数据，向海外客户代表贿赂。

Coinbase has revealed that a recent security breach, which affected a small portion of its user base, was the result of a targeted social engineering attack.

Coinbase透露，最近的安全漏洞影响了其用户群的一小部分，是针对性的社会工程攻击的结果。

According to a blog post by Coinbase CEO Brian Armstrong, customer representatives were offered bribes by criminals in an attempt to gain access to customer data. In response, Coinbase launched an investigation and refused to give in to a $20 million ransom demanded by the attackers.

根据Coinbase首席执行官Brian Armstrong的博客文章，犯罪分子向客户代表贿赂，以试图访问客户数据。作为回应，Coinbase发起了一项调查，拒绝屈服于攻击者要求的2000万美元赎金。

The incident, which began in early 2023, affected fewer than 1% of users each month and involved hackers stealing user credentials and attempting to factor two-factor authentication (2FA) codes.

该事件始于2023年初，每月影响少于1％的用户，并涉及黑客窃取用户凭据并试图考虑两因素身份验证（2FA）代码。

Stolen Data Includes IDs, Contacts—Private Keys Remain Secure

被盗的数据包括ID，联系人 - 私人钥匙保持安全

To be transparent, Coinbase said that while the attackers took some customer data, no sensitive data was affected and user accounts were fully secure. The stolen information involved names, addresses, phone numbers, and email addresses. It also includes some restricted financial data, such as disguised Social Security numbers and bank account information.

为了保持透明，Coinbase说，攻击者采集了一些客户数据，但没有影响敏感数据，并且用户帐户完全安全。被盗的信息涉及名称，地址，电话号码和电子邮件地址。它还包括一些受限制的财务数据，例如伪装的社会保险号和银行帐户信息。

Hackers also stole some documents and training files. Moreover, they accessed records containing ID images and past transactions. They could not get login secrets, private keys, or two-factor verification codes, nor were they able to get into or send funds through Coinbase or its customers’ accounts.

黑客还偷走了一些文档和培训文件。此外，他们访问了包含ID图像和过去交易的记录。他们无法获得登录秘密，私钥或两因素验证代码，也无法通过Coinbase或其客户的帐户进入或发送资金。

Coinbase chose not to pay the requested ransom and decided to face the attack from the beginning. Coinbase said that it would repay users who lost money due to the social engineering tactic.

Coinbase选择不支付要求的赎金，并决定从一开始就面对袭击。 Coinbase表示，由于社会工程策略，它将偿还损失资金的用户。

To protect against similar situations, Coinbase has added several additional security systems. They include making it harder to transfer a lot of funds, setting up a support center in the U.S. with improved supervision, and expanding ways to detect and block suspicious actions.

为了防止类似情况，Coinbase增加了几个其他安全系统。它们包括使很难转移大量资金，通过改进的监督在美国建立支持中心，并扩大检测和阻止可疑行动的方法。

Coinbase decided not to pay the ransom and instead declared a $20 million reward for any information leading to the arrest of the people responsible. First, they are actively searching for the stolen funds. Additionally, they are working with police from the United States and other countries. Coinbase instantly removed the employees involved and reported them to authorities for criminal charges.

Coinbase决定不支付赎金，而是宣布了导致逮捕负责人的任何信息的2000万美元奖励。首先，他们正在积极寻找被盗的资金。此外，他们正在与美国和其他国家的警察合作。 Coinbase立即将相关员工撤职，并将其报告给当局以要求刑事指控。

Coinbase Alerts Users to Stay Vigilant Against Fraud Attempts

Coinbase提醒用户对欺诈尝试保持警惕

Meanwhile, Coinbase has reached out to users, informing them and advising all customers on how to protect themselves from similar fraud. Coinbase sent a reminder to all users, stating it does not request login details, 2FA codes, or transfers to unknown destinations.

同时，Coinbase已与用户联系，通知他们，并向所有客户提供有关如何保护自己免受类似欺诈的建议。 Coinbase向所有用户发送了一个提醒，并指出它不要求登录详细信息，2FA代码或转移到未知目的地。

Armstrong noted that the company is interested in expanding globally, either by acquisition or partnerships.

阿姆斯特朗指出，该公司有兴趣通过收购或合作伙伴关系在全球范围内扩展。

Despite the event, Coinbase has accomplished a significant achievement. Coinbase recently achieved a major milestone by being the first crypto firm to be part of the S&P 500 Index. Many see the S&P 500’s interest in Coinbase as a good omen for cryptocurrency’s increase in popularity.

尽管发生了这一事件，但Coinbase取得了重大成就。 Coinbase最近是第一个成为标准普尔500指数一部分的加密公司，实现了一个重要的里程碑。许多人认为标准普尔500对Coinbase的兴趣是加密货币受欢迎程度提高的好兆头。