How Coinbase Phishers Steal One-Time Passwords
Summary: A phishing site at coinbase.com.password-reset[.]com, aimed at Italian Coinbase users, captured at least 870 sets of credentials before it was taken offline, according to Hold Security founder Alex Holden, whose team accessed the site's administration panel. The phishers identified targets by attempting new Coinbase signups against more than 2.5 million Italian email addresses, checking over 216,000 addresses on Oct. 10 and attempting 174,000 registrations the next day, then phishing the addresses that failed because they were already tied to accounts.
What you should know: The gang pushed a button that prompted victims for one-time passwords in real time, and Coinbase disclosed last month that attackers stole cryptocurrency from 6,000 customers after bypassing SMS multi-factor authentication.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026