加密貨幣市場操縱：SIM卡交換黑客如何針對SEC的Twitter帳戶

最近在一個備受矚目的黑客案件中的認罪引起了人們對在線帳戶安全和他們可能產生的連鎖反應的關注

A recent guilty plea in a high-profile hacking case has highlighted the vulnerabilities in online account security and the ripple effects they can have on cryptocurrency markets.

最近在一個備受矚目的黑客案件中的認罪案件突出了在線帳戶安全性的脆弱性以及它們對加密貨幣市場可能產生的連鎖反應。

Eric Council, a 25-year-old from Athens, Georgia, pleaded guilty in the United States federal court to charges related to the hacking of the US Securities and Exchange Commission’s (SEC) X account that occurred in January last year.

來自佐治亞州雅典的25歲的埃里克議會在美國聯邦法院認罪，對去年一月份發生的美國證券交易委員會（SEC）X帳戶的黑客攻擊。

The incident caused a brief but significant Bitcoin price spike after a fraudulent post falsely claimed SEC approval of Bitcoin exchange-traded funds.

該事件引起了短暫但重大的比特幣價格飆升，此前欺詐性的職位錯誤地宣稱已獲得比特幣交易所交易資金的批准。

How The Scheme Unfolded

計劃如何展開

According to court documents, Council, together with co-conspirators, carried out Subscriber Identity Model (SIM) swaps to gain unauthorized access to the @SECgov X account. The US DoJ described this SIM swap attack as follows:

根據法院文件，理事會與同謀一起進行了訂戶身份模型（SIM）掉期，以獲得未經授權的訪問@Secgov X帳戶的訪問。美國司法部描述了這種SIM Swap攻擊如下：

"A SIM swap attack is a form of sophisticated fraud where criminal actors fraudulently induce a mobile carrier to reassign a mobile phone number from a victim’s SIM card to a SIM card and telephone controlled by a criminal actor attempting to access valuable information associated with the victim’s telephone. Members of SIM swapping groups conduct SIM swaps for the purpose of defeating multifactor authentication and/or two-step verification security features for internet connected accounts, such as social media and virtual currency accounts."

“ SIM Swap攻擊是一種複雜的欺詐形式，犯罪分子欺詐性地誘使移動運營商將手機號碼從受害者的SIM卡重新分配到SIM卡和由犯罪分子控制的電話，試圖訪問與受害人相關的有價值信息電話交換小組的成員進行SIM交換，目的是為互聯網連接的帳戶（例如社交媒體和虛擬貨幣帳戶）擊敗多因素身份驗證和/或兩步驗證安全功能。”

After completing the SIM swap, Council used forged identification and other deceptive tactics to obtain a replacement SIM card. He then accessed the SEC’s X account and shared the login credentials with his associates.

完成SIM交換後，理事會使用偽造的身份證明和其他欺騙性策略來獲得替代SIM卡。然後，他訪問了SEC的X帳戶，並與他的同事分享了登錄憑證。

Soon after, the account was used to post a fraudulent announcement regarding the SEC's approval of Bitcoin ETFs. The announcement was completely false, yet it managed to move markets almost instantly.

不久之後，該帳戶被用來發布有關SEC批准比特幣ETF的欺詐公告。該公告完全是錯誤的，但它幾乎立即轉移了市場。

According to the DoJ, Bitcoin’s price rose by over $1,000 following the post, only to fall more than $2,000 after the SEC regained control of its account and discredited the message.

根據美國司法部的數據，該職位後比特幣的價格上漲了1,000美元，只有超過2,000美元在SEC恢復了其帳戶的控制並抹黑了該消息。

With Bitcoin ETFs being a hot topic among investors at the time, any news—true or false—had the potential to cause significant crypto market reactions. The SEC’s official account is particularly influential, any genuine approval of Bitcoin ETFs was seen as a major milestone in the crypto space.

當時比特幣ETF是投資者中的熱門話題，任何新聞（或錯誤）都有引起重大加密市場反應的潛力。 SEC的官方帳戶特別有影響力，任何真正的比特幣ETF的認可都被視為加密貨幣領域的主要里程碑。

By impersonating the SEC and fabricating an approval announcement, the conspirators were able to manipulate crypto market sentiment and drive a temporary price surge.

通過冒充SEC並製作批准公告，陰謀者能夠操縱加密市場的情緒並推動臨時價格上漲。

Potential Sentence And Other Details

潛在的句子和其他細節

Council’s plea agreement revealed further details about his involvement in SIM swapping and other fraudulent activities. In addition to the SEC incident, he admitted to attempting additional SIM swaps and was found in possession of fake identification templates and a portable ID printer.

理事會的認罪協議揭示了有關他參與模擬交換和其他欺詐活動的更多細節。除了SEC事件外，他還承認嘗試額外的SIM交換，並被發現擁有假識別模板和便攜式ID打印機。

He acknowledged receiving roughly $50,000 in payments for his role in the conspiracy, which included performing the SIM swap that led to the SEC breach.

他承認，他在陰謀中的角色大約獲得了50,000美元的付款，其中包括執行導致SEC違規的SIM卡交換。

The DoJ revealed that Council has pleaded guilty in federal court to one count of conspiracy to commit aggravated identity theft. This charge carries a potential maximum sentence of five years in prison, a fine of up to $250,000, and up to three years of supervised release. His sentencing is set for May 16, 2025.

司法部透露，理事會已在聯邦法院認罪，以串謀犯有嚴重的身份盜用。這項指控可能最高判處五年徒刑，最高可罰款25萬美元，最高三年的監督釋放。他的判決定於2025年5月16日。

The featured image was created with DALL-E, and the chart is from TradingView.

特色圖像是使用DALL-E創建的，圖表來自TradingView。