A user's CEX account lost $750,000 in BTC due to Google verification cloud sync issues

According to GoPlus monitoring, according to GoPlus monitoring, a Bitcoin holder has just safely transferred assets from a Coldcard MK4 hardware wallet to a centralized exchange to avoid the risk of the hardware wallet itself being stolen, but his Google account was hacked within 12 hours after the transfer was completed. As a result, the exchange account was logged in and about 750,000 US dollars of bitcoins were emptied because Google Verification Cloud sync was enabled.

GoPlus points out that such attacks usually do not rely on brute force cracking, but are achieved through social worker phishing and weak password crashing into databases. Common routes include: phishing pages inducing the input of Google passwords, malicious browser plug-ins or cracking software to steal cookies and passwords, reuse weak passwords, and resetting passwords after email or phone numbers have been taken over.