骗子在过去一周冒充 Coinbase 诈骗用户 170 万美元

过去一周，至少三名 Coinbase 用户和一名加密用户报告成为冒充 Coinbase 诈骗者的目标

Coinbase users have once again become a target for crypto-scammers, with at least four users reporting being contacted by scammers posing as Coinbase employees in the past week.

Coinbase 用户再次成为加密货币诈骗者的目标，至少有四名用户报告称，过去一周冒充 Coinbase 员工的诈骗者联系了他们。

One victim, who shared their story with Edge & Node co-founder Tegan Kline on July 7, claims to have lost $1.7 million in a self-custody wallet after being tricked into sharing part of their seed phrase with a scammer.

7 月 7 日，一名受害者向 Edge & Node 联合创始人 Tegan Kline 分享了自己的故事，他声称自己被骗子与诈骗者分享了部分助记词，结果在自己保管的钱包中损失了 170 万美元。

The victim said the scammer called them on July 6, claiming to be from Coinbase’s security team. During the call, the scammer sent the victim an email that appeared to be from Coinbase, which stated that the victim was “speaking to an official representative at Coinbase.”

受害者称，诈骗者于 7 月 6 日给他们打电话，自称来自 Coinbase 的安全团队。在通话过程中，诈骗者向受害者发送了一封看似来自 Coinbase 的电子邮件，其中表示受害者正在“与 Coinbase 的官方代表交谈”。

The scammer then claimed that the victim's wallet was “connecting directly with the blockchain,” which was causing transactions to come out of the wallet.

诈骗者随后声称受害者的钱包“直接与区块链连接”，这导致交易从钱包中流出。

The scammer also sent another email, which appeared to be from Coinbase and showed an outgoing transaction from the victim's wallet.

诈骗者还发送了另一封电子邮件，该电子邮件似乎来自 Coinbase，并显示了受害者钱包中的一笔传出交易。

The scammer directed the victim to a website and told them to enter their seed phrase to stop the transactions. The victim said they knew entering their seed phrase on the website “was not safe,” but they still went ahead and entered “a portion” of their seed phrase, without submitting it.

诈骗者将受害者引导至一个网站，并告诉他们输入助记词以停止交易。受害者表示，他们知道在网站上输入助记词“不安全”，但他们仍然继续输入助记词的“一部分”，但没有提交。

Hours later, the victim claimed that $1.7 million was drained from their self-custody wallet.

几小时后，受害者声称 170 万美元从他们的自助钱包中被盗走。

Hiro Systems CEO Alex Miller said that such websites “are capturing data as you enter it,” even without submitting it, and the victim’s partial reveal of their seed phrase was likely enough for “the bad guys [to] brute force the rest.”

Hiro Systems 首席执行官亚历克斯·米勒 (Alex Miller) 表示，此类网站“在您输入数据时就会捕获数据”，即使没有提交数据，受害者部分泄露的助记词很可能足以让“坏人对其余部分进行暴力破解”。

Miller also said that a scammer pretending to be from Coinbase contacted him recently using a similar scam. He believes his information may have been leaked in 2022 from CoinTracker’s email service provider database.

米勒还表示，一名冒充 Coinbase 的骗子最近使用类似的骗局联系了他。他认为他的信息可能于 2022 年从 CoinTracker 的电子邮件服务提供商数据库中泄露。

“Specifically, they were using the Coinbase API key connecting to CoinTracker to verify that they were me (in addition to other info),” he said. “At the very least cycle your API keys if you have been using CoinTracker.”

“具体来说，他们使用连接到 CoinTracker 的 Coinbase API 密钥来验证他们是我（以及其他信息），”他说。 “如果你一直在使用 CoinTracker，至少循环使用你的 API 密钥。”

On July 3, an X user with the handle “TraderPaul04” shared what they called a “pretty sophisticated” similar social engineering attempt by a fake Coinbase rep.

7 月 3 日，一位名为“TraderPaul04”的 X 用户分享了一位假冒 Coinbase 代表的“相当复杂”的类似社交工程尝试。

The scammer called TraderPaul and claimed that there was a login attempt on their account from a different city.

诈骗者致电 TraderPaul，声称有人尝试从其他城市登录他们的帐户。

TraderPaul said “an American male claiming to be a Coinbase employee” stated their full name and confirmed their email before claiming to have temporarily locked their Coinbase account and sending a fake password reset link with the aim of nabbing their account password.

TraderPaul 表示，“一名自称是 Coinbase 员工的美国男性”说出了自己的全名并确认了自己的电子邮件地址，然后声称暂时锁定了自己的 Coinbase 账户，并发送了虚假的密码重置链接，目的是获取其账户密码。

TraderPaul wasn't convinced and insisted on calling Coinbase customer service directly, adding the scammer “hung up” after failing to convince him not to.

TraderPaul 并不相信，坚持直接致电 Coinbase 客户服务部，并补充说，骗子在未能说服他不要这样做后就“挂断了电话”。

On July 7, another X user, “beanx,” posted that they also had a similar scam call with a fake Coinbase rep, who claimed that “someone attempted to login to my Coinbase.”

7 月 7 日，另一位 X 用户“beanx”发帖称，他们也接到了一位假冒 Coinbase 代表的类似诈骗电话，该代表声称“有人试图登录我的 Coinbase”。

Cointelegraph contacted Coinbase for comment but did not receive an immediate response.

Cointelegraph联系了Coinbase请其置评，但没有立即收到回复。

Around $1.19 billion was lost to crypto security incidents in the first half of 2024, with over $900 million being stolen through phishing and seed phrase compromise attacks.

2024 年上半年，加密安全事件造成约 11.9 亿美元损失，其中超过 9 亿美元通过网络钓鱼和助记词泄露攻击被盗。