Binance reveals $6.43 billion theft via fake job interviews and AI tool abuse
Original title: Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft
A North Korea-linked campaign stole $6.43 billion from Binance using social engineering and tampered AI tools.
Binance disclosed a sophisticated attack that resulted in $6.43 billion in stolen assets. The campaign began with a supply-chain compromise of an engineer's Homebrew installer leading to a trojanized AI tool. Social engineering via fake job interviews compromised another engineer, who downloaded malicious code. The attackers used the initial foothold to access internal systems and wallet signing services.
- Theft totaled $6.43 billion
- Attack spanned June to October 2026
- Used tampered Homebrew and fake recruitment interviews
- Malware executed during assignment setup
- Systems rebuilt in new environment
Impact: $6.43 billion in cryptocurrency assets
- 1.Replaced affected devices
- 2.Decommissioned credentials and tokens
- 3.Enhanced security scans across all employee devices
- Vendors
- binance
- Threat actors
- north korean-linked threat actors
- Victims
- binance
- Countries
- north korea
From the original article
3 min read at thehackernews.com
Binance on Tuesday said the record-setting theft of $6. 43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisticated, multi-stage campaign" that involved the use of a tampered Homebrew installation and recruitment-themed social engineering attack targeting two of its engineers. "It was not a single isolated breach or a simple phishing incident,"
thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.