Binance describes a multi-stage attack that led to a crypto theft

Crime · First reported 2 Nov, 20:00 · Updated 20:19

Image: Wikimedia Commons · NASA Earth Observatory image by Lauren Dauphin, using Landsat data from the U.S. Geological Survey. Story by Adam Voiland. · Public domain

Binance says attackers used compromised computers and an internal AI tool to gain control of wallets and steal cryptocurrency. Its report traces the attack from a tampered software download in June to the theft on October 29.

Binance's report says an employee downloaded a tampered coding tool in June, exposing the wallet team to the attacker.
The report says a second engineer was targeted after downloading a malicious code repository during what he believed was a legitimate job interview process.
Binance says attackers used compromised computers and an internal AI tool before triggering the theft on October 29; it says it will repay affected customers.

Summary written by Lux AI from 2 articles

Key facts

Theft date: October 29
Initial compromise: A Binance wallet-team employee downloaded a tampered coding tool in June, according to the company's report.
Company response: Binance said it is repaying customers who lost funds through the hack.
Attribution: The FBI blamed a North Korean hacking group; North Korea rejected the claim.