CaptainW wrote:Long John wrote:Got an email, ostensibly from Coinbase, saying a smartphone in Russia was trying to get access to my account. If I want to stop that access, click on a link, which took me to a page that looked like a Coinbase sign-in page. If I'd signed in there, I don't doubt I would have sent my password to some bad actors. Classic phishing attempt: Prey on your fear that someone is trying to steal your money (or Bitcoin) ... which ironically is true.
The "Coinbase" email came from this actual address (email@example.com) which hides under a spoofed Coinbase address. They can't even spell Coinbase right.
The links hiding under "I Authorize This Computer" and "Cancel Request" are identical, a long URL at grrhut.com, so no matter which you clicked you're taken to the fake Coinbase sign-in page.
Beware this scam email ! And enable 2 Factor Authentication so no one can withdraw from your account without a randomly generated code that is sent to your mobile device.
I received one of these today. Thanks to your warning, I knew immediately what it was.
I got one the other day too. Are they sending these randomly and we just happen to have Coinbase accounts, or did they somehow get a hold of the Coinbase mailing list?