利用高调社交媒体帐户的漏洞泵送比特币价格

在一个具有里程碑意义的案件中，强调了备受瞩目的社交媒体帐户的脆弱性，阿拉巴马州的26岁的埃里克委员会小被判处14个月监禁

A 26-year-old Alabama man has been sentenced to 14 months in prison for his role in a SIM swap attack that compromised the U.S. Securities and Exchange Commission’s (SEC) official X account and led to a false report of Bitcoin ETF approval.

一名26岁的阿拉巴马州男子因其在SIM交换攻击中的角色而被判处14个月徒刑，该攻击损害了美国证券交易委员会（SEC）的X官方X帐户，并导致了Bitcoin ETF批准的虚假报告。

Eric Council Jr., also known online as “Ronin” and “Agiantschnauzer,” was sentenced May 16 after pleading guilty earlier this year to one count of conspiracy to commit aggravated identity theft and access device fraud.

小埃里克议会（Eric Council Jr.

The SEC’s X account was compromised on January 9, 2024, when a post on the platform falsely announced the Commission’s approval of a spot Bitcoin ETF. At the time, then-SEC Chair Gary Gensler quickly rescinded the release, stating that the agency’s account had been “compromised.”

SEC的X帐户在2024年1月9日被妥协，当时该平台上的一篇文章错误地宣布了该委员会对现场比特币ETF的批准。当时，时任当时的主席Gary Gensler迅速取消了该释放，并指出该机构的帐户已被“妥协”。

Bitcoin’s price rose by more than $1,000 in minutes after the fake announcement, and then-SEC Chair Gary Gensler quickly rescinded the release, stating that the agency’s small business administration grant had been compromised.

虚假宣布后，比特币的价格在几分钟内上涨了1,000多美元，当时担任主席加里·盖斯勒（Gary Gensler）迅速撤销了该新闻稿，并指出该机构的小型企业管理赠款已被妥协。

The post was made by hackers who had gained control of the account by performing a SIM swap on the SEC’s phone number. To do this, Council used a counterfeit ID made by a handheld ID printer to pose as an AT&T customer and obtain a replacement SIM card.

该帖子是由黑客通过对SEC的电话号码进行模拟交换来控制了该帐户的。为此，理事会使用手持ID打印机制作的假冒ID作为AT＆T客户，并获得替换SIM卡。

Council, 26, of Mobile, Alabama, was part of a group who also used the password reset codes to gain access to the X account. These codes were generated when the SEC attempted to reset its own account password after noticing suspicious activity.

阿拉巴马州莫比尔的26岁的理事会是一个小组的一部分，他们还使用密码重置代码来访问X帐户。当SEC在注意到可疑活动后试图重置自己的帐户密码时，就会生成这些代码。

During an FBI search of Council’s residence, agents discovered internet searches on his devices, including “How can I know for sure if I am being investigated by the FBI?”

在联邦调查局对市议会居住地进行搜索时，特工在其设备上发现了互联网搜索，包括“我怎么能确定是否正在接受联邦调查局的调查？”

The matter arose after the SEC had been applying to approve a number of exchange-traded products that track the price of Bitcoin.

SEC申请批准许多跟踪比特币价格的交易所交易产品后，出现了此事。

Earlier this year, the SEC approved a number of spot Bitcoin exchange-traded products, adding 11 new ETFs such as Grayscale Bitcoin Trust and BlackRock’s IBIT.

今年早些时候，SEC批准了许多现货比特币交易所交易产品，增加了11种新ETF，例如灰比特币信托和贝莱德的IBIT。

The move was a watershed for cryptocurrency investing, as it opened up regulated markets to products that directly track the price of the world’s largest cryptocurrency.

此举是一个用于加密货币投资的分水岭，因为它向直接跟踪世界上最大的加密货币价格的产品开放了受监管的市场。

Following the approval, several U.S. senators penned a letter to the SEC, raising concerns over the regulator’s handling of cryptocurrency and its potential impact on small investors.

批准后，美国几位参议员写信给SEC，引起了监管机构处理加密货币及其对小型投资者的潜在影响的担忧。

In February, Council pleaded guilty in U.S. District Court in Washington, D.C., to conspiracy to commit aggravated identity theft and access device fraud.

2月，理事会在华盛顿特区的美国地方法院认罪，要求串谋实施严重的身份盗用和访问装置欺诈。

Prosecutors recommended a two-year sentence, while defense counsel sought a sentence of just over a year.

检察官建议判处两年徒刑，而辩护律师则要求一年多的判决。

The court ultimately imposed a 14-month term of imprisonment, to be followed by three years of supervised release.

法院最终判处14个月的监禁期，其次是三年监督释放。

The judge also ordered Council to forfeit $50,000, barred him from dark web access and imposed an order to have no further identity fraud.

法官还命令理事会没收50,000美元，禁止他进入黑暗的访问权限，并命令没有进一步的身份欺诈。

“Eric Council Jr.’s sentencing brings both the perils of hacking into social media and the instant market impact of misinformation,” said Charles Glassman, an attorney at legal firm Michelman & Sonnenberg.

法律公司Michelman＆Sonnenberg的律师查尔斯·格拉斯曼（Charles Glassman）说：“小埃里克委员会（Eric Council Jr.

“As finance becomes electronic, constant caution and judicial notice must be maintained to have faith in regulatory commissions and not have our institutions be subject to theft and fraud.”

“随着财务变成电子的谨慎，必须保持谨慎和司法通知，以使其对监管委员会有信心，并且没有我们的机构受到盗窃和欺诈的约束。”