The original spearphishing targeted Coinbase employees, not their users. It seems once that failed, the people behind this cast a wider net.