United

when

Tornado Cash

Crypto phishing scammers are apparently earning five-figure weekly incomes by impersonating Coinbase support and using leaked data to target high-ranking crypto executives and software engineers.
Nick Neuman, CEO and co-founder of Bitcoin <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/balancing-crypto-security-convenience-jameson-lopp-casa" rel="null" target="null" text="null" title="null">self-custody</a> solutions provider Casa, said he was recently called by a “<a data-ct-non-breakable="null" href="https://cointelegraph.com/news/coinbase-ceo-brian-armstrong-donald-trump-meeting" rel="null" target="null" text="null" title="null">Coinbase</a> support” scammer and found out more than expected after he “decided to turn the tables on him and ask him about being a scammer.”
“We make a minimum of five figures a week. We hit $35K two days ago; we do it for a reason, there is money to be made in it,” responded the scammer when asked how much they made.&nbsp;
Neuman posted the conversation in a video on X on Nov. 20 in which the scammer orchestrated the attack by stating that a password change request had been canceled and a notification had been sent. The “notification” contained a malicious link, which prompted Neuman to ask the scammer what types of people fell for the phishing attacks.
“You would be surprised, its people like you, you’re a CEO at Casa [...] we’re hitting CEOs, CFOs, software engineers,” he said before adding:&nbsp;&nbsp;
<blockquote>
 “We don’t call poor people, the data we have is from a database where the minimum you have to have is $50,000,”
</blockquote>
The scammer added that “money or education isn’t a determining factor,” claiming that they get details of their high-roller targets from Bitcoin financial services company Unchained Capital.
<blockquote>
 “We have the Unchained database and we assume that if you’re into crypto you’ll have a Coinbase account, so that’s how we run it.”&nbsp;&nbsp;
</blockquote>
The scammer said they use an “auto-doxxer” to get more details on their targets before making the phishing calls and can also spoof emails to make them appear as if they originated from Coinbase.
The end goal isn’t to get the victim’s password, but to eventually have them send funds to a wallet they control, the scammer said.&nbsp;
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/chirag-tomar-sentenced-coinbase-fraud-fake-websites" rel="null" target="null" text="null" title="null">Fake Coinbase website leads to $20M fraud, 5-year sentence</a>
They have used <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/us-lawmakers-question-what-treasury-tornado-cash" rel="null" target="null" text="null" title="null">Tornado Cash</a> to launder stolen crypto since they’re not based in the United States, and sometimes they exchange it for privacy coin <a data-ct-non-breakable="null" href="https://cointelegraph.com/learn/articles/what-is-monero-xmr" rel="null" target="null" text="null" title="null">Monero</a> (<a data-ct-non-breakable="null" href="https://cointelegraph.com/xmr-price-index" rel="null" target="null" text="null" title="null">XMR</a>).&nbsp;
<blockquote>
 “After you hold it in XMR for a couple of days, that bitch is gone, you’re not seeing the funds again.”&nbsp;
</blockquote>
When asked about converting to fiat, he said they do not use any KYC exchanges and use hardware wallets, specifying <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/ledger-users-targeted-malicious-clear-signing-phishing-email" rel="null" target="null" text="null" title="null">Ledger</a> — which has been at the epicenter of phishing attacks since its database was <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/ledger-data-leak-a-simple-mistake-exposed-270k-crypto-wallet-buyers" rel="null" target="null" text="null" title="null">hacked</a> in 2020 — before using intermediaries to cash out.&nbsp;
The scammer said accessing company databases was easy and crypto was like the “Wild Wild West.” 
“If you lose $30-$40,000 in <a data-ct-non-breakable="null" href="https://cointelegraph.com/ethereum-price" rel="null" target="null" text="null" title="null">ETH</a> or <a data-ct-non-breakable="null" href="https://cointelegraph.com/bitcoin-price" rel="null" target="null" text="null" title="null">BTC</a>, who are you going to call? The crypto police?” they said, adding that they’re now trying to hit $100,000 per month from their <a data-ct-non-breakable="null" href="https://cointelegraph.com/learn/articles/unmasking-the-top-10-crypto-scammers" rel="null" target="null" text="null" title="null">scam</a>.&nbsp;
More than $127 million was stolen in the third quarter by crypto phishing attacks, <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/crypto-phishing-attacks-q3-2024" rel="null" target="null" text="null" title="null">according</a> to Web3 security firm Scam Sniffer.&nbsp;
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/crypto-four-years-grow-cant-be-shut-down-kain-warwick-infinex/" rel="null" target="null" text="null" title="null">Crypto has 4 years to grow so big ‘no one can shut it down’: Kain Warwick, Infinex</a>

Coinbase scammer claims to earn 5 figures a week targeting crypto CEOs

Cointelegraph

Other articles published on Nov 21, 2024

Trump’s Team in Talks with Crypto Leaders for Major Regulatory Shift: Report

Crypto: Why Ethereum Remains The Uncontested Leader Despite Its Limitations

Arcana Network Launches the First Ever Chain Abstraction Wallet, Ushering a New Era of Multi-Chai...

How Adewale Adekomaiya is redefining the practice of Quality Assurance in tech, globally

The Graph introduces GRC-20 standard for Web3 data structure

Solana Preparing for a 60% Move This Month—Can the Bulls Push the SOL Price Post $350?

Join our free newsletter for daily crypto updates!