Sturdy

A Coinbase user recently shared a Coinbase-related scam story indicating that the exchange&#8217;s servers might be compromised. 



Jacob Canfield, a YouTube host and bitcoin enthusiast, claimed he received a text message about a changed two-factor authentication (2FA) setting on their Coinbase account. Shortly after, he got three phone calls from an individual claiming to be a Coinbase customer support representative. The calls originated from a San Francisco number, adding to the illusion of legitimacy.



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">Holy shit. I just got attacked with one of the most complex scams in <a href="https://twitter.com/hashtag/crypto?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener">#crypto</a> that I have seen to date. Please read if you use <a href="https://twitter.com/coinbase?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@coinbase</a>. This just happened 15 minutes ago. THIS IS A WARNING FOR ALL COINBASE USERS! There has been some sort of a data breach. First, I… <a href="https://t.co/aOVWLpAtY4" target="_blank">pic.twitter.com/aOVWLpAtY4</a>&mdash; Jacob Canfield (@JacobCanfield) <a href="https://twitter.com/JacobCanfield/status/1668762812213067776?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">June 13, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



During the calls, the impersonator asked whether Canfield was traveling outside the US and whether he had requested changes to the email or 2FA settings. Although the trader denied travel plans and insisted he hadn&#8217;t initiated any changes, the scammer insisted on revealing the verification code.




 
 You might also like:

 <a href="https://crypto.news/sec-refuses-to-make-any-decision-on-coinbases-rulemaking-petition/">
 SEC refuses to make any decision on Coinbase’s rulemaking petition </a>
 




The scammer also intended to redirect Canfield to a &#8220;security team&#8221; to verify the account and prevent suspension. The scammer possessed the user&#8217;s name, email address, and location to establish credibility. They even sent a fraudulent email from help@coinbase.com to the user&#8217;s email containing a seemingly legitimate verification code.



Canfield immediately changed his Coinbase account password and 2FA settings. However, the scammer insisted those actions would not suffice for verification and threatened to lock the account for seven days unless the user provided the verification code. When Canfield refused, the scammer abruptly ended the call.



The incident raised concerns about a potential attack on Coinbase&#8217;s servers. In the replies, users shared similar stories involving the impersonators who claimed to be from the exchange&#8217;s support.



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">Was targeted by the same / very similar scam. Received a phone call from &quot;Coinbase Support&quot;, and at the same time I received this email. Told the caller just to lock my account, and he got aggressive. I immediately logged in and locked my account. No reason for me really to… <a href="https://t.co/yyjNT9YgYw" target="_blank">pic.twitter.com/yyjNT9YgYw</a>&mdash; 6457.eth (@JKrantz) <a href="https://twitter.com/JKrantz/status/1668789611831730178?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">June 14, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



Moreover, another user<a href="https://www.chainabuse.com/report/4f5ff506-3e40-4694-a364-bc54996b825c?context=browse-all" data-type="URL" data-id="https://www.chainabuse.com/report/4f5ff506-3e40-4694-a364-bc54996b825c?context=browse-all" target="_blank" rel="noopener"> reported</a> a similar case on ChainAbuse in November 2022. According to the post, the amount lost was over 13 BTC (around $360,000). 



In Canfield&#8217;s case, the hackers not only had his data, which would mean a data breach. They were also able to spoof the email as if it were from @coinbase.com which looks like an alleged hack. The domain and some less critical servers could probably be compromised.



Crypto.news has requested an official comment from Coinbase regarding the matter.




 
 You might also like:

 <a href="https://crypto.news/defi-protocol-sturdy-finance-falls-victim-to-800k-security-attack/">
 DeFi protocol Sturdy Finance falls victim to $800k security attack </a>

Twitter thread shows Coinbase’s servers may be compromised

crypto.news

Other articles published on Jun 14, 2023

First Time in 3 Months: Bitcoin Fear and Greed Index Signals Fear for 2 Conscutive Days

Asia Tech 2023: Navigating the AI Regulatory Landscape

MarsDAO Ecosystem. February report

FTX Founder Temporarily Blocks New Charges in Indictment: The Current State of the Case

WEMIX Terms of Service Update Notice

Decentralized Exchange Hashflow Hacked, Seems to Be White-hat Op

Join our free newsletter for daily crypto updates!