Phishers Swim Around 2FA in Coinbase Account Heists

Attackers employ evasive tactics to avoid detection, including one called “short-lived domains”—in which the domains used in the attack “stay alive for extremely short periods of time”–that deviates from typical phishing practices, researchers wrote.