Bitfinex 用户在员工被 hack 后遭受轻微的 phishing 攻击

Bitfinex，一家 prominent and long-standing cryptocurrency exchange，最近 grappled with 它 categorized 为 “minor” information security incident，发生在 10 月 30 日至 11 月 5 日之间。这一 breach 的 root cause 追溯到 customer support agent 的 hacking，导致了一系列 targeting Bitfinex users 的 phishing attacks。然而，这些 phishing attempts 的 repercussions 被 firm 报告为 relatively contained。

Bitfinex 解释平台 security breach

Bitfinex 于 11 月 4 日做出的 披露，详细说明了 unauthorized breach，使个人或团体能够 access 其 customer support boards 的 limited segment。accessed data 被描述为 partial, incomplete, and outdated。这一 intrusion 是通过 phishing 一名 customer support agent 实现的，从而 granted unauthorized access 到 platform 的 specific sections。Bitfinex 特别强调，compromised support agent 不 hold senior permissions，从而 limiting their access 到 crucial supporting tools and help desk tickets。

因此，breach 没有 extend 到 organization 内更 critical systems 或 databases，safeguarding the core infrastructure。exchange 强调，其 foundational systems 在整个 incident 中 remained uncompromised and secure。他们 confirmed 没有 server, wallet, 或 database infrastructure 被 breached，ensuring the protection of customer funds。此外，Bitfinex assured 平台上的 customer assets 从未 at risk，essential password information remained out of reach。

Collaborative investigation and commitment to solving the issue

大多数 affected customer accounts 要么是 empty，要么是 inactive，从而 minimizing the potential impact of the breach。虽然 Bitfinex confirmed 问题已经 resolved，但公司 actively engaged 在 reviewing the incident 和 compromised information。此外，他们 proactively communicating 与 affected by the breach 的客户。作为对 breach 的 response，Bitfinex promptly notified law enforcement authorities 关于 the situation。

公司 expressed its commitment 到 collaborating with investigation authorities 以 identify and locate 对 phishing attack 负责的 individual or group。值得注意的是，Bitfinex underlined 其 history of successfully pursuing legal action against individuals who have attempted to disrupt their operations in the past。尽管发生了 this incident，Bitfinex reaffirmed its dedication 到 maintaining robust security measures。exchange regularly reviews its security procedures 并 mandates comprehensive cybersecurity training for all employees。

这些 measures 旨在 mitigating potential risks 并 fortifying 其 systems 的整体 resilience 以应对 future breaches。Bitfinex 成立于 2012 年的香港，自 2013 年以来一直在 CEO Jean-Louis van der Velde 的 leadership 下运营。该 exchange 在 加密货币 landscape 中 holds a significant position，在 CoinGecko 的 “Trust Score” index 中 various cryptocurrency exchanges 中排名第 17 位。在过去一个月中，Bitfinex 在其平台上 recorded over 800,000 visits，indicating a considerable user base and market presence。