Binance and Kraken, two of the world’s largest cryptocurrency exchanges, were recently targeted in a wave of social engineering attacks similar to the one that led to a major data breach at Coinbase.
Hackers approached customer support agents with bribery offers and detailed instructions for contacting attackers through Telegram, Bloomberg reports citing people familiar with the matter. Both exchanges managed to block the attempts without losing any customer data.
The exchanges faced tactics mirroring those used against Coinbase (COIN), which earlier this week revealed it expects to pay $180 million to $400 million in remediation costs and customer reimbursements after attackers gained access to their personal information.
That breach led to a $20 million ransom demand after the attackers managed to bribe Coinbase’s overseas employees/contractors to get customer information. The exchange has fired the staff involved and has contacted law enforcement.
At Binance, internal systems including artificial intelligence bots helped detect bribery-related messages, shutting down conversations before they escalated. Policies that limit access to customer data unless users initiate contact also helped mitigate risk.
Coinbase’s reportedly started seeing unusual activity in January, and last December, rival exchanges had begun warning the company about unusual activity targeting its largest clients.
