United

Edge

Read

A new scam saw bad actors impersonate Coinbase employees to dupe users out of millions of dollars worth of cryptocurrency assets. 
Tegan Kline, the co-founder of Edge &amp; Node, <a href="https://x.com/theklineventure/status/1810068252900376999" target="_blank" rel="">has warned of this new attack</a> where his “good friend” lost $1.7 million from their self-custody wallet. The victim was tricked into sharing their private key. 
The scammers contacted the victim via a call, masquerading as an employee of the crypto exchange Coinbase.&nbsp; 
Soon after, they sent an email that seemed to originate from Coinbase’s security team. In the email, the scammers identified themselves as “David Brown,” adding that the recipient was “speaking to an official” Coinbase representative. 
<figure class="wp-block-image">
 <img decoding="async" src="https://lh7-us.googleusercontent.com/docsz/AD_4nXdo1NCI7pWxg0pVjjJaZUg62Wmj4YloLIFuQgKrYJlLTeTKk5kG_dkLWhHmLL48-r1Mr16aB8kgc6wlioWBZEcEjk8WpeUMsauwskFfj3XG-eTVy-EhPxIQPTn28VYLe5L0imtAMbzDRXqNq-9bo4vnois?key=KIAM3uql25rVqKpzVS8vsQ" alt="Scammers drain $1.7m claiming to be Coinbase employees - 17">
 <figcaption class="wp-element-caption">
 Fake email sent by the scammer to the victim | Source: Tegan.eth on X
 </figcaption>
</figure> 
To seem legitimate, they informed the victim about their past transactions from Coinbase.&nbsp; 
The scammer then claimed the victim’s wallet was “connecting directly with the blockchain,” resulting in unauthorized transactions. This was followed by a subsequent email showing an outgoing transaction. 
To address this issue, the victim was redirected to a website under the scammer’s control.&nbsp; 
According to the victim, they knew the website was “not safe” but entered just a part of their key phrase but did not submit it. Despite this, $1.7 million was siphoned off the victim’s wallet.&nbsp; 
These malicious websites capture data as a user enters it, said Hiro Systems CEO Alex Miller, adding that even a part of a seed phrase is enough for them to “brute force the rest.” 
Miller added <a href="https://x.com/alexlmiller/status/1810074926478713052" target="_blank" rel="">he was targeted</a> in a similar fake Coinbase employee scam. The scammers claimed that someone was trying to access his account. 
 You might also like: <a href="https://crypto.news/crypto-scammers-stole-nearly-60m-from-20-victims-in-h1-2024-data-shows/"> Crypto scammers stole nearly $60m from 20 victims in H1 2024, data shows </a> 
The executive estimated that his email may have leaked in a 2022 data breach from CoinTracker’s email service provider database. He advised anyone using CoinTracker to “cycle [their] API keys,” which scammers leverage to verify as the victim during an attack. 
“This feels like a moderately-targeted attack. they created a look-alike email address and spoofed a phone number similar to mine but so far haven’t appeared to try and phish me or crack any of my underlying accounts,” Miller added. 
Another X user, “TraderPaul04” also <a href="https://x.com/Paul04Trader/status/1808138689345618378" target="_blank" rel="">claimed to have “thwarted”</a> a similar attack. The user received an automated call telling him that his Coinbase account was being accessed from a different location. 
He was asked to confirm the login. Following this, he received a call from “an American male” who identified as a Coinbase employee. He then received a fake password reset link, which TraderPaul04 identified <a href="https://crypto.news/trezor-comments-on-phishing-emails-sent-to-community/">as a phishing attempt</a>. 
The X user also confirmed that there were no login attempts on his account.&nbsp; 
The Coinbase brand name has been leveraged on several occasions by scammers, and it’s not just limited to employee impersonation. In May, the United States Department of Justice (DoJ) <a href="https://www.justice.gov/usao-wdnc/pr/indian-national-pleads-guilty-wire-fraud-conspiracy-stealing-over-37-million-spoofing" target="_blank" rel="">charged an individual</a> for stealing $37 million in crypto via a fake Coinbase pro website. 
Beyond Coinbase, scammers have impersonated other <a href="https://crypto.news/crypto-scammers-impersonate-binance-exec-for-210k-haul/">crypto exchanges</a>, <a href="https://crypto.news/fbi-warns-of-crypto-scams-impersonating-agency-in-el-paso/">government agencies</a>, and even <a href="https://crypto.news/spacex-giveaway-scam-floods-youtube-with-deep-fake-elon-musk/">celebrities</a>. In some cases, victims have been duped <a href="https://crypto.news/new-job-recruitment-crypto-scam-surfaces-in-india/">in the name of job interviews</a>. 
 Read more: <a href="https://crypto.news/scammers-target-crypto-exchanges-with-fake-stablecoins-on-ton/"> Scammers target crypto exchanges with fake stablecoins on TON </a>

Scammers drain $1.7m claiming to be Coinbase employees

crypto.news

在 2024年7月8日發表的其他文章

Web3 User Engagement Hits 10M Daily Active Wallets, Surges 40% in Q2 2024

Biggest Bitcoin Transfers Ever Recorded by German Government

Compound (COMP) Price Prediction 2025, 2026, 2027, 2028, 2029 and 2030

BlockDAG’s $56.8 Million Presale Triumph and Cutting-Edge Dashboard Attract Investors; Insights o...

Starknet Announces The Biggest Community Event – STRK Price Pump Coming?

Market In Red, Again: Best Altcoins To Buy At The Current Dip

訂閱免費電子報，每天收取加密貨幣最新動態！