UNKNOWN

SEPTEMBER 2019

FRANCE

COINHOUSE

DESCRIPTION OF EVENTS

"A pioneer in the industry since 2015, we are your partner to buy, hold and sell your bitcoins, ethereums and more than 30 cryptoassets." "Coinhouse is a French company which has been providing cryptocurrency management and transaction services since 2015. French authorities have recognized our seriousness and the quality of our compliance operations. Therefore, we are the first PSAN registered with the Autorité des Marchés Financiers." "At Coinhouse, our goal is to make cryptoassets accessible to everyone." "Your cryptocurrencies are kept safe with our top of the line stocking solution."

 

"The Coinhouse adventure began in 2015. Founded by Eric Larchevêque and Thomas France, it was first known as ”La Maison du Bitcoin”. The concept was to offer a physical space in the heart of Paris, bringing together the French community passionate about blockchain and cryptoactives to share and exchange between them. In a very inmediate way, it is possible to buy and sell cryptoactives by visiting the website. An online platform was also launched, initially offering the purchase and sale of Bitcoin and Ethereum."

 

"In 2018, La Maison du Bitcoin became independent from Ledger. A new team led by Nicolas Louvet implemented a development strategy focusing on simple and fast online services, as well as Premium services for customers who want to be accompanied in their investments. La Maison du Bitcoin then became Coinhouse. At the end of 2018, Coinhouse Custody Services (CCS), a sister company, is created to offer a secure custody service for crypto-currencies for both Coinhouse and CCS clients."

 

"In 2021, Coinhouse is accelerating its development and targeting a European clientele. Now 100% online, its platform offers an intuitive interface and simple and innovative services to enable even the most novice investors to invest in the innovative cryptoasset sector. Coinhouse is also the reference partner for companies. It became the first company to obtain the status of Service Provider on Digital Assets (PSAN) from the AMF, which recognises the seriousness and quality of its operations."

 

"According to tweets published to the official Coinhouse account , hackers managed to gain access to the client database containing names and email addresses. The hackers then used this information to begin phishing attacks against users, leading Coinhouse to advise its customers not to click or respond to emails about the exchange."

 

"French cryptocurrency exchange Coinhouse says that it underwent a phishing attack, during which hackers gained access to its client mail distribution database."

 

"Coinhouse says they responded to the hack by immediately switching the platform to a maintenance mode, thereby preventing the hackers from gaining access to user funds. The exchange claims they were able to contain the hack and promptly sent an email to their customer base explaining how to avoid the phishing attack."

 

"However, the exchange acknowledged that users may have already been affected by the hack. They recommended any clients who gave credentials to the scam email to change their identifiers on other websites in order to prevent any further loss."

 

"In addition, Coinhouse says they will require all users to change their password when the exchange comes back online."

 

"We are currently undergoing a phishing attack attempt to recover the credentials of our customers. If you are a Coinhouse customer and you have received an email asking to verify your data, do not click. It's not about us."

 

"It was our newsletter distribution base that was attacked, not our platform. This is how they were able to send this email with your first name. If you did not click on the email button, your credentials were not leaked."

 

"Yes that's it! Warning! It plays on the site address where the i of coinhouse is replaced by an L."

 

"The attack targeted our email distribution base. The hackers had temporary access to this database which contains first names, names and emails. They used it to try to redirect to their bogus site."

 

"We immediately put our platform into maintenance to prevent any fraudulent attempt to withdraw funds. At the same time, we quickly stopped the attack and then sent an email back to our customer base explaining the procedure to follow."

 

"If some of our customers have given their identifiers on this fake site, we advise them to check if they use the same identifiers for other sites. If this is the case, they must change their identifiers on these sites as a precaution."

 

"Regarding our platform: when it comes back online, all our customers will be asked to enter a new password."

CoinHouse, a prominent cryptocurrency exchange in France, failed to secure their newsletter database, and this fell into the hands of phishers, who requested all customers to enter their personal information on a phishing website. The requests were highly convincing since they addressed customers by name, and redirected them to a similar domain name (replacing the i with an L), however there were multiple typos in the content.

 

In response, the exchange notified all customers on Twitter, placed the platform into maintenance mode, and enforced all customers to change passwords when the platform was relaunched.

Sources And Further Reading

 For questions or enquiries, email info@quadrigainitiative.com.

Get Social

  • email
  • reddit
  • telegram
  • Twitter

© 2021 Quadriga Initiative. Your use of this site/service accepts the Terms of Use and Privacy Policy. This site is not associated with Ernst & Young, Miller Thompson, or the Official Committee of Affected Users. Hosted in Canada by HosterBox.