Million

Edge

The crypto community has raised the alarm about an ongoing phishing scam targeting investors after scammers posing as crypto exchange Coinbase successfully drained nearly $2 million over the weekend. The scam is reportedly related to the CoinTracker security breach from 2022. 
<h2 style="font-weight: 400;" id="1-7-million-drained-from-ledger-wallet">$1.7 Million Drained From Ledger Wallet</h2> 
On Monday, Edge &amp; Node’s CEO, Tegan Kline, reported that a crypto investor had fallen victim to a phishing attack. The scammers impersonated a Coinbase security member to target crypto investors. As a result, a user’s self-custody wallet was <a href="https://bitcoinist.com/new-crypto-heist-alert-hacker-drains-5-6m-from-data-storage-platform-wallet/" target="_blank" rel="noopener ">drained</a> after revealing half of their seed phrase. 
Per the report, a crypto investor was contacted via Google Voice by a scammer pretending to be from the crypto exchange’s security team. The scammer, falsely claiming to be named “David Brown,” contacted the victim to “confirm” suspicious transactions from their account. 
<img decoding="async" class="size-large wp-image-309265 aligncenter" src="https://bitcoinist.com/wp-content/uploads/2024/07/GR6kfnVXAAA1m0n.jpeg?w=539&amp;resize=539%2C660" alt="Coinbase" width="539" height="660" srcset="https://bitcoinist.com/wp-content/uploads/2024/07/GR6kfnVXAAA1m0n.jpeg?w=1004 1004w, https://bitcoinist.com/wp-content/uploads/2024/07/GR6kfnVXAAA1m0n.jpeg?w=343 343w, https://bitcoinist.com/wp-content/uploads/2024/07/GR6kfnVXAAA1m0n.jpeg?w=768 768w, https://bitcoinist.com/wp-content/uploads/2024/07/GR6kfnVXAAA1m0n.jpeg?w=539&amp;resize=539%2C660 539w, https://bitcoinist.com/wp-content/uploads/2024/07/GR6kfnVXAAA1m0n.jpeg?w=750 750w" sizes="(max-width: 539px) 100vw, 539px" data-recalc-dims="1"> 
The victim received an email from a fake Coinbase address “verifying” that the person on the phone was an official <a href="https://bitcoinist.com/sec-vs-coinbase-gensler-communications/" target="_blank" rel="noopener ">exchange</a> representative. The crypto investor received another email after verification claiming their alleged transaction had been delayed. 
The email shows that a transaction for $3,050.87 in Ethereum (ETH) had been delayed for 72 hours for “security reasons.” The scammer continued the call, talking to the victim about their previous addresses, which raised suspicions. 
When questioned about their identity and the information he disclosed, the scammer stated that he “knows these things because he is from Coinbase.” The alleged Coinbase representative acknowledged the victim’s concerns but claimed the transaction was still coming through. 
The scammer claimed to need the victim’s seed phrase as their Ledger wallet was connecting directly to the blockchain, and he was “trying to disconnect it.” After directing the victim to a website, they argued with the scammer about the safety of this action but eventually entered a portion of their seed phrase. 
A few hours later, the investor received CoinTracker alerts. Upon checking their Ledger live, the victim saw that $1.7 million had been drained in Bitcoin (BTC), <a href="https://bitcoinist.com/ethereum-drops-analysts-defiant-bullish/" target="_blank" rel="noopener ">ETH</a>, GRT, MATIC, and DOT. 
<h2 style="font-weight: 400;" id="cointracker-breach-linked-to-new-phishing-scam">CoinTracker Breach Linked To New Phishing Scam?</h2> 
Many community members speculated about the scam, wondering how the scammer obtained some of the victim’s information. To some, this scheme was conducted by someone who knew the investor and their holdings. 
However, Alex Miller, CEO of Hiro, <a href="https://x.com/alexlmiller/status/1810074926478713052" target="_blank" rel="noopener nofollow">suggested</a> that the scam was linked to the CoinTracker security breach from 2022. The data breach compromised the information of over 1.5 million users who used the cryptocurrency portfolio and tax management platform. 
Miller revealed that someone was trying to access his Coinbase account using information obtained during the CoinTracker breach. 
<img loading="lazy" decoding="async" class="size-large wp-image-309266 aligncenter" src="https://bitcoinist.com/wp-content/uploads/2024/07/Captura-de-Pantalla-2024-07-08-a-las-1.24.45-p.-m.png?w=489&amp;resize=489%2C288" alt="Coinbase" width="489" height="288" data-recalc-dims="1"> 
The scammers seemingly used Coinbases’ API key, alongside other information, to verify they were the CEO. Nonetheless, the crypto exchange’s security team informed him of the ongoing login attempt. 
An X user <a href="https://x.com/SHL0MS/status/1810302303972323740" target="_blank" rel="noopener nofollow">informed</a> the community that scammers were able to “generate a (legitimate) support ticket + email” that could be used to “reference when calling you posing as Coinbase support.” 
Other users shared their scamming attempts from this month. Several investors reported receiving calls from alleged Coinbase representatives to confirm suspicious transactions or login activity. 
Ultimately, Miller suggested users “make sure your Coinbase account is locked down” and “cycle your API keys if you have been using cointracker.” 
<img loading="lazy" decoding="async" class="size-large wp-image-309261 aligncenter" src="https://bitcoinist.com/wp-content/uploads/2024/07/ETHUSDT_2024-07-08_08-19-07.png?w=980&amp;resize=980%2C524" alt="ETH, ETHUSDT, coinbase" width="980" height="524" srcset="https://bitcoinist.com/wp-content/uploads/2024/07/ETHUSDT_2024-07-08_08-19-07.png?w=1102 1102w, https://bitcoinist.com/wp-content/uploads/2024/07/ETHUSDT_2024-07-08_08-19-07.png?w=640 640w, https://bitcoinist.com/wp-content/uploads/2024/07/ETHUSDT_2024-07-08_08-19-07.png?w=768 768w, https://bitcoinist.com/wp-content/uploads/2024/07/ETHUSDT_2024-07-08_08-19-07.png?w=980&amp;resize=980%2C524 980w, https://bitcoinist.com/wp-content/uploads/2024/07/ETHUSDT_2024-07-08_08-19-07.png?w=750 750w" sizes="(max-width: 980px) 100vw, 980px" data-recalc-dims="1">

Crypto Investors Beware! Coinbase Phishing Scam Swipes $1.7 Million

Table of Contents

Bitcoinist

Other articles published on Jul 9, 2024

Bitcoin Falls Below $60,000! Analysis from July 9, 2024

Breaking: Invesco Galaxy Reveals Fee For Spot Ethereum ETF In S-1 Amendment

Pepe Coin Bounces Back: Investor Sentiment Soars

Doja Cat’s X Account Hacked to Promote Scam Token “$DOJA”

Stay Away From These Altcoins l Crypto Crash

USDC and USDT Integration Boosts Opera Mini’s MiniPay Wallet

Join our free newsletter for daily crypto updates!