假Coinbase：它是如何诞生的以及谁是创造者

30 岁的 Chirag Tomar 承认犯有电汇欺诈阴谋罪，他使用虚假 Coinbase 在加密货币诈骗中欺骗了多人

An Indian national has pleaded guilty in the United States to charges of stealing more than $37 million by creating a website that mimicked cryptocurrency trading platform Coinbase, essentially creating a fake Coinbase.

一名印度国民在美国认罪，指控他创建了一个模仿加密货币交易平台 Coinbase 的网站，实质上是创建了一个假 Coinbase，从而窃取了超过 3700 万美元。

Chirag Tomar, 30, pleaded guilty to wire fraud conspiracy for defrauding multiple people in a cryptocurrency scam using a phony Coinbase, which carries a maximum sentence of 20 years in prison and a $250,000 fine. He was arrested on December 20, 2023, upon his entry into the country.

30 岁的 Chirag Tomar 承认犯有电信诈骗罪，他使用虚假 Coinbase 在加密货币诈骗中欺骗了多人，最高可判处 20 年监禁和 25 万美元罚款。他于 2023 年 12 月 20 日入境后被捕。

“Tomar and his co-conspirators (fake Coinbase accomplices) organized a scheme to steal millions of cryptocurrencies from hundreds of victims around the world and in the United States, including in the Western District of North Carolina,” the Department of Justice (DoJ) said last week.

美国司法部 (DoJ) 表示：“托马尔和他的同谋（假冒 Coinbase 共犯）组织了一项计划，从世界各地和美国（包括北卡罗来纳州西区）的数百名受害者那里窃取数百万美元的加密货币。”上周说。

The website, created around June 2021, was called “CoinbasePro(.)com” (basically the fake Coinbase, it made unfortunate people believe that it was a sort of “pro” version of the real one) in an attempt to disguise itself as Coinbase Pro and trick unsuspecting users into believing they are accessing the legitimate version of the virtual currency trading platform.

该网站于 2021 年 6 月左右创建，名为“CoinbasePro(.)com”（基本上是假 Coinbase，它让不幸的人们相信它是真币的“专业”版本），试图将自己伪装成Coinbase Pro 并诱骗毫无戒心的用户相信他们正在访问虚拟货币交易平台的合法版本。

It is worth noting that Coinbase discontinued the offering in favor of Advanced Trade in June 2022; and this was to further imply that CoinbasePro was the fake Coinbase, the gradual migration of Coinbase Pro customers to Coinbase Advanced was completed on November 20, 2023.

值得注意的是，Coinbase 于 2022 年 6 月停止了发行，转而支持 Advanced Trade；这进一步暗示CoinbasePro是假Coinbase，Coinbase Pro客户向Coinbase Advanced的逐步迁移已于2023年11月20日完成。

Victims who entered credentials on the fake Coinbase site had their login information stolen by scammers and, in some cases, were tricked into granting remote desktop access which allowed the cyber criminals to access their Legitimate Coinbase accounts.

在假冒 Coinbase 网站上输入凭据的受害者的登录信息会被诈骗者窃取，并且在某些情况下，受害者会被诱骗授予远程桌面访问权限，从而使网络犯罪分子能够访问其合法的 Coinbase 帐户。

“The scammers also impersonated Coinbase customer service representatives and tricked users into providing their two-factor authentication codes to the scammers over the phone,” the DoJ said, adding: “Once the scammers gained access to the victims’ Coinbase accounts, they quickly transferred the victims’ cryptocurrencies to the cryptocurrency wallets under the scammers’ control.”

美国司法部表示：“诈骗者还冒充 Coinbase 客户服务代表，诱骗用户通过电话向诈骗者提供双因素身份验证码。”并补充道：“一旦诈骗者获得了受害者 Coinbase 账户的访问权限，他们就会迅速转移资金受害者的加密货币转移到诈骗者控制下的加密货币钱包中。”

In one case highlighted by prosecutors, an unidentified fake Coinbase victim located in the Western District of North Carolina lost over $240,000 in cryptocurrency this way after being tricked into calling a fake Coinbase representative under the guise of blocking their trading accounts.

在检察官重点关注的一起案件中，一名位于北卡罗来纳州西区的身份不明的假冒 Coinbase 受害者被骗以冻结其交易账户为幌子致电假冒 Coinbase 代表，从而损失了超过 24 万美元的加密货币。

Tomar is believed to have been in possession of several cryptocurrency wallets that received stolen funds totaling tens of millions of dollars, which were later converted into other forms of cryptocurrency or transferred to other wallets and ultimately cashed out to fund a style of luxurious life.

据信，托马尔拥有多个加密货币钱包，这些钱包接收了总计数千万美元的被盗资金，这些资金后来被转换成其他形式的加密货币或转移到其他钱包，最终兑现以资助奢华的生活。

This included expensive watches from brands such as Rolex, the purchase of luxury vehicles such as Lamborghini and Porsche, and several trips to Dubai and Thailand.

其中包括劳力士等品牌的昂贵手表，购买兰博基尼和保时捷等豪华汽车，以及多次前往迪拜和泰国旅行。

The development in the investigation into the fake Coinbase comes as a Special Investigation Team (SIT) associated with the Criminal Investigation Department (CID) in the Indian state of Karnataka arrested Srikrishna Ramesh (also known as Sriki) and his alleged accomplice Robin Khandelwal for the theft of 60.6 bitcoins from a cryptocurrency exchange company called Unocoin in 2017.

对假冒 Coinbase 的调查取得进展之际，印度卡纳塔克邦刑事调查部 (CID) 的特别调查小组 (SIT) 逮捕了 Srikrishna Ramesh（又名 Sriki）及其涉嫌同谋 Robin Khandelwal。 2017 年，一家名为 Unocoin 的加密货币交易公司被盗 60.6 比特币。

It was thus discovered where the money went, after it passed through the fake Coinbase.

这样，钱通过假 Coinbase 后就被发现去了哪里。

The Coinbase clone (the fake Coinbase) is just the tip of the Iceberg that started a series of events.

Coinbase 克隆（假 Coinbase）只是引发一系列事件的冰山一角。

The phony Coinbase case also follows a new wave of arrests in the United States in connection with an elaborate, multi-year scheme designed to help North Korea-linked IT workers obtain remote jobs at more than 300 U.S. companies and advance the the country's weapons of mass destruction in violation of international sanctions.

在 Coinbase 假案发生之前，美国出现了新一波逮捕行动，涉及一项精心设计的多年计划，该计划旨在帮助与朝鲜有联系的 IT 工人在 300 多家美国公司获得远程工作，并推进该国的武器装备。违反国际制裁的大规模毁灭。

Among the arrested parties is a 27-year-old Ukrainian citizen, Oleksandr Didenko, accused of creating fake accounts on IT job search platforms in the United States and selling them to foreign IT workers to obtain employment.

被捕者中包括一名27岁的乌克兰公民Oleksandr Didenko，他被指控在美国的IT求职平台上创建虚假账户，并将其出售给外国IT工人以获得就业机会。

He is also believed to have operated a now-dismantled service called UpWorkSell that advertised the “ability for remote IT workers to purchase or rent accounts in the names of identities other than their own on various online freelance IT job search platforms.”

据信，他还经营着一项名为 UpWorkSell 的服务，该服务现已被拆除，该服务宣传“远程 IT 员工能够在各种在线自由 IT 求职平台上以自己以外的身份购买或租赁帐户”。

According to the affidavit in support of the complaint, Didenko operated approximately 871 “proxy” identities, provided proxy accounts for three freelance IT hiring platforms in the United States, and provided proxy accounts for three different U.S.-based money services transmitters.

根据支持投诉的宣誓书，Didenko 运营着大约 871 个“代理”身份，为美国的三个自由 IT 招聘平台提供代理账户，并为三个不同的美国货币服务发送者提供代理账户。

Those involved are not just North Koreans

参与其中的不仅仅是朝鲜人

Didenko's accomplice, Christina Marie Chapman, 49, was also arrested for running what is called a “laptop farm” by hosting multiple laptops at her residence for North Korean IT workers to give the impression they were in the U.S. and apply for remote work positions in the country.

迪登科的同伙、49 岁的克里斯蒂娜·玛丽·查普曼 (Christina Marie Chapman) 也因经营所谓的“笔记本电脑农场”而被捕，她在自己的住所为朝鲜 IT 工人托管多台笔记本电脑，给人留下他们在美国的印象，并申请朝鲜的远程工作职位。国家。

“The conspiracy (…) generated at least $6.8 million in revenue for foreign IT workers,” Chapman's indictment said, adding that the workers obtained jobs at numerous prominent U.S. companies and exfiltrated data from at least two of them, including

查普曼的起诉书称，“这一阴谋（……）为外国 IT 工人创造了至少 680 万美元的收入”，并补充说，这些工人在许多著名的美国公司获得了工作，并从其中至少两家公司窃取了数据，其中包括