Binance Hackers Used Fake Job Interview To Compromise Computer Before $6.3 Billion Attack
In a initial report into what went wrong, the world's largest crypto exchange detailed a sophisticated hacking endeavour that began with an advert for a tampered version of a coding tool in June and set in chain a series of security breaches that culminated in the theft of the crypto on October 29.
Recommended For You Iran says in 'intensive' negotiations with US to avert war via mediatorsThe FBI has blamed a North Korean hacking group, a claim North Korea has rejected. Binance has said it is repaying all customers who have lost funds through the hack.
Stay up to date with the latest news. Follow KT on WhatsApp Channels.
Binance said that the attack started when an employee from its wallet developer team in June downloaded an AI tool that had been tampered with. The crypto exchange detected this, replaced the device and changed credentials but the employee's role and that of others on the wallet team were exposed to the hacker.
Then in September a second software engineer seeking a new job downloaded "malicious code repository" onto his computer after interviewing for what the person thought was a legitimate role, including meeting virtually with the CEO of a fictitious company.
On October 20, the attacker used the compromised computer plus an internal AI tool to gain control of the wallet developer's system and that of a second wallet developer on that team.
On 29 October, the attacker used the second wallet developer's computer, using stolen credentials from the first wallet developer, and triggered a malicious script to launch the attack.
"This should not have happened, and we apologise for the concern, disruption and uncertainty it caused our users, partners and the wider industry," Binance said in the report
Binance said that as a result of the hack, it was increasing investment in AI-enabled detection and is working on establishing a security research fund and targeted initiatives with leading AI companies.
ALSO READ- Binance clients pull $4.7 billion after hack as crypto world studies fallout Binance hack: What the record $6.3 billion crypto theft means for investors, exchanges UAE's FSRA issues statement after Binance reports $6.3-billion security breach Binance hack 2026: Where the $6.3 billion breach ranks in crypto's biggest heists
Legal Disclaimer:
MENAFN provides the
information “as is” without warranty of any kind. We do not accept
any responsibility or liability for the accuracy, content, images,
videos, licenses, completeness, legality, or reliability of the information
contained in this article. If you have any complaints or copyright
issues related to this article, kindly contact the provider above.

Comments
No comment