加密货币市场操纵：SIM卡交换黑客如何针对SEC的Twitter帐户

最近在一个备受瞩目的黑客案件中的认罪引起了人们对在线帐户安全和他们可能产生的连锁反应的关注

A recent guilty plea in a high-profile hacking case has highlighted the vulnerabilities in online account security and the ripple effects they can have on cryptocurrency markets.

最近在一个备受瞩目的黑客案件中的认罪案件突出了在线帐户安全性的脆弱性以及它们对加密货币市场可能产生的连锁反应。

Eric Council, a 25-year-old from Athens, Georgia, pleaded guilty in the United States federal court to charges related to the hacking of the US Securities and Exchange Commission’s (SEC) X account that occurred in January last year.

来自佐治亚州雅典的25岁的埃里克议会在美国联邦法院认罪，对去年一月份发生的美国证券交易委员会（SEC）X帐户的黑客攻击。

The incident caused a brief but significant Bitcoin price spike after a fraudulent post falsely claimed SEC approval of Bitcoin exchange-traded funds.

该事件引起了短暂但重大的比特币价格飙升，此前欺诈性的职位错误地宣称已获得比特币交易所交易资金的批准。

How The Scheme Unfolded

计划如何展开

According to court documents, Council, together with co-conspirators, carried out Subscriber Identity Model (SIM) swaps to gain unauthorized access to the @SECgov X account. The US DoJ described this SIM swap attack as follows:

根据法院文件，理事会与同谋一起进行了订户身份模型（SIM）掉期，以获得未经授权的访问@Secgov X帐户的访问。美国司法部描述了这种SIM Swap攻击如下：

"A SIM swap attack is a form of sophisticated fraud where criminal actors fraudulently induce a mobile carrier to reassign a mobile phone number from a victim’s SIM card to a SIM card and telephone controlled by a criminal actor attempting to access valuable information associated with the victim’s telephone. Members of SIM swapping groups conduct SIM swaps for the purpose of defeating multifactor authentication and/or two-step verification security features for internet connected accounts, such as social media and virtual currency accounts."

“ SIM Swap攻击是一种复杂的欺诈形式，犯罪分子欺诈性地诱使移动运营商将手机号码从受害者的SIM卡重新分配到SIM卡和由犯罪分子控制的电话，试图访问与受害人相关的有价值信息电话交换小组的成员进行SIM交换，目的是为互联网连接的帐户（例如社交媒体和虚拟货币帐户）击败多因素身份验证和/或两步验证安全功能。”

After completing the SIM swap, Council used forged identification and other deceptive tactics to obtain a replacement SIM card. He then accessed the SEC’s X account and shared the login credentials with his associates.

完成SIM交换后，理事会使用伪造的身份证明和其他欺骗性策略来获得替代SIM卡。然后，他访问了SEC的X帐户，并与他的同事分享了登录凭证。

Soon after, the account was used to post a fraudulent announcement regarding the SEC's approval of Bitcoin ETFs. The announcement was completely false, yet it managed to move markets almost instantly.

不久之后，该帐户被用来发布有关SEC批准比特币ETF的欺诈公告。该公告完全是错误的，但它几乎立即转移了市场。

According to the DoJ, Bitcoin’s price rose by over $1,000 following the post, only to fall more than $2,000 after the SEC regained control of its account and discredited the message.

根据美国司法部的数据，该职位后比特币的价格上涨了1,000美元，只有超过2,000美元在SEC恢复了其帐户的控制并抹黑了该消息。

With Bitcoin ETFs being a hot topic among investors at the time, any news—true or false—had the potential to cause significant crypto market reactions. The SEC’s official account is particularly influential, any genuine approval of Bitcoin ETFs was seen as a major milestone in the crypto space.

当时比特币ETF是投资者中的热门话题，任何新闻（或错误）都有引起重大加密市场反应的潜力。 SEC的官方帐户特别有影响力，任何真正的比特币ETF的认可都被视为加密货币领域的主要里程碑。

By impersonating the SEC and fabricating an approval announcement, the conspirators were able to manipulate crypto market sentiment and drive a temporary price surge.

通过冒充SEC并制作批准公告，阴谋者能够操纵加密市场的情绪并推动临时价格上涨。

Potential Sentence And Other Details

潜在的句子和其他细节

Council’s plea agreement revealed further details about his involvement in SIM swapping and other fraudulent activities. In addition to the SEC incident, he admitted to attempting additional SIM swaps and was found in possession of fake identification templates and a portable ID printer.

理事会的认罪协议揭示了有关他参与模拟交换和其他欺诈活动的更多细节。除了SEC事件外，他还承认尝试额外的SIM交换，并被发现拥有假识别模板和便携式ID打印机。

He acknowledged receiving roughly $50,000 in payments for his role in the conspiracy, which included performing the SIM swap that led to the SEC breach.

他承认，他在阴谋中的角色大约获得了50,000美元的付款，其中包括执行导致SEC违规的SIM卡交换。

The DoJ revealed that Council has pleaded guilty in federal court to one count of conspiracy to commit aggravated identity theft. This charge carries a potential maximum sentence of five years in prison, a fine of up to $250,000, and up to three years of supervised release. His sentencing is set for May 16, 2025.

司法部透露，理事会已在联邦法院认罪，以串谋犯有严重的身份盗用。这项指控可能最高判处五年徒刑，最高可罚款25万美元，最高三年的监督释放。他的判决定于2025年5月16日。

The featured image was created with DALL-E, and the chart is from TradingView.

特色图像是使用DALL-E创建的，图表来自TradingView。