Binance says fake job interviews used in $6.3bn crypto hack
Binance reveals hackers used bogus job interviews and compromised internal AI tools to steal a record $6.3bn in crypto, triggering global withdrawals suspension.
Stock photo for illustration only, not from the actual event
- Binance suffered a record-breaking crypto hack resulting in the theft of 6.3 billion dollars.
- Hackers utilized fake job interview setups and malicious software to compromise company engineers.
- The security breach forced the platform to temporarily suspend global customer withdrawals until Sunday.
- US crime agencies and cyber analysts indicated the attack bears hallmarks of being orchestrated by North Korea.
Binance has revealed that hackers who stole a record 6.3 billion dollars in cryptocurrency utilized sophisticated fake job interviews alongside a compromised internal AI tool to execute the massive breach.
The firm stated that the perpetrators deployed social engineering techniques such as phishing tactics to trick individuals into handing over sensitive personal details, which subsequently allowed unauthorized access to targeted accounts.
Stock photo for illustration only, not from the actual event
The attack sequence began when one of the company's engineers was contacted through a legitimate employment platform and invited to participate in bogus job interviews conducted by fake company representatives.
According to Binance, the attackers employed advanced methods to build trust with the target, including sharing social media profiles containing personal photographs to lower their guard.
The hackers then leveraged the compromised computer of the first engineer, alongside a compromised internal AI tool in October, to gain control over the laptops belonging to two other engineers and advance the attack.
The security incident forced Binance to suspend customer withdrawals globally, cutting off user access to their digital assets until normal services were successfully restored on Sunday, after which billions were withdrawn.
"We apologise for the concern, disruption and uncertainty it caused our users, partners and the wider industry,"
Binance
The company noted it has taken multiple steps following the breach, including cooperating with law enforcement agencies to trace and freeze affected assets, while setting aside over 100% of the funds needed to cover losses with 98% of token assets replenished by Saturday.
From a cybersecurity standpoint, exploiting recruitment platforms and professional networking sites to target high-level engineers represents an escalating threat vector. Attackers increasingly bypass perimeter defenses by focusing on human vulnerabilities, turning trusted hiring processes into infiltration gateways that grant deep internal access.
United States law enforcement agencies, including the FBI and the Secret Service, have assisted Binance in tracing the stolen cryptocurrency wallets, while cyber analysts suggested the breach mirrors tactics previously used by North Korea, a claim Pyongyang has consistently denied.
Source: BBC World
Found something wrong in this article? Report an issue with this article
Comments
Leave a Comment