They manipulate coinbase wallets by changing the authentification method from SMS to QR codes (for e.g. the Google Authenticator). Reading the QR-Code allows them to get verification codes for the wallet which enables them to release transactions to,
for example, above address.