North Korean hackers stole $6.3B from Binance via fake job interviews
Briefing by News4U · First published
Binance reported that North Korean hackers stole $6.3 billion on October 29 using a multi-stage campaign that began in June when one engineer downloaded malware via a tampered installer, exposing wallet team details. In September, a second engineer was lured through a fake job interview on a legitimate platform; the attackers built trust with shared social media, then had the engineer download malware disguised as an assignment. The malware compromised an internal AI tool and allowed the attackers to access Engineer C’s computer on October 29, using Engineer A’s container token to trigger the theft. The FBI attributed the attack to TraderTraitor, linked to the Lazarus Group. [1] [2]
Sources
- Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist
The Verge · · Excerpt
- North Korean fake job interview led to $6.3B Binance heist
The Register · · Excerpt