


Pressing the “Send Info” button prompted visitors to supply additional personal information, including their name, date of birth, and street address. “These guys have real-time capabilities of soliciting any input from the victim they need to get into their Coinbase account,” Holden said. In each case, the phishers manually would push a button that caused the phishing site to ask visitors for more information, such as the one-time password from their mobile app. Holden said each time a new victim submitted credentials at the Coinbase phishing site, the administrative panel would make a loud “ding” - presumably to alert whoever was at the keyboard on the other end of this phishing scam that they had a live one on the hook.
