06-22-2019, 04:00 PM
![[Image: anonymous_897439873434.jpg?x=442&y=293&crop=1]](https://regmedia.co.uk/2016/07/19/anonymous_897439873434.jpg?x=442&y=293&crop=1)
Crypto orgs were caught off guard when they were under attack from hackers, utilizing Zero-Days combined alongside spear phishing. Oddly enough, this attack targeted Coinbase employees and not its users. The attackers, using two Firefox Zero-days, with a sandbox escape, but were blocked by staffers after being detected.
Security researcher, Samuel Grob, back in April, reported an RCE bug to Mozilla, via their private bug tracker. Two months after the bug was reported, that same one was utilized in an attack against Coinbase. It is unclear as to how information of the bug was obtained by malicious actors.
As of the writing of this article, no identities of the attackers have been released, but patches for the two zero-days has been released.
Original article can be found here.
That was the news folks, have a good weekend, and stay safe out there.
---Mad-Architect