Amazing story of how Coinbase detected and responded to a sophisticated attack using two Firefox 0-days and spear phishing: https://blog.coinbase.com/responding-to-firefox-0-days-in-the-wild-d9c85a57f15b