An unknown threat actor attempted to gain remote access to Coinbase’s systems by stealing login credentials of one of its employees. The attack was launched through SMS alerts urging several Coinbase engineers to log into their company accounts and read an important message, which turned out to be a phishing page.
The attack highlights the importance of adopting a multi-layered defense and implementing MFA protection to prevent unauthorized access.