Binance Hackers Used Fake Interviews to Steal Record-Breaking Cryptocurrency
Original title: Fake Interview of Software Engineer Led to Binance Mega-Heist
Attackers stole 233.46 million XRP, 970,500 SOL and 44.2 million OP from Binance hot wallets using compromised engineer credentials.
Threat actors targeted software engineers at Binance with fake recruitment interviews and zero-day malware in a months-long campaign. They accessed an internal AI tool to compromise additional employees and stole from hot wallets on October 29. Binance has rebuilt the affected systems and is reviewing the incident.
Unconfirmed: The specific threat group responsible is not named, though North Korean actors are suspected
- Campaign started with September fake interviews
- Attackers stole XRP, SOL and OP from hot wallets
- Binance detected 57 suspected North Korean attacks this year
- Fortra experts criticized developer machine controls
Impact: unauthorized access to hot wallets resulting in cryptocurrency theft
- 1.Rebuild affected wallet systems
- 2.Replace affected devices
- 3.Enhance AI-based behavioral detection
- Vendors
- Binance
- Products
- hot wallets
- Threat actors
- North Korean hackers
- Malware
- zero-day malware
- Victims
- Binance
- Countries
- North Korea
From the original article
3 min read at infosecurity-magazine.com
Binance has revealed details of how North Korean hackers stole $6. 4bn theft of crypto assets
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.