Binance report details how fake job interviews led to $6.3 billion crypto theft

Binance says a sequence of compromised employee devices and systems culminated in the theft of $6.3 billion in cryptocurrency on October 29. The exchange says attackers used a fake job interview and an internal AI tool, and that it is repaying affected customers and strengthening security measures.

• Binance says the attack began in June, when an employee downloaded a tampered AI tool; the company detected it, replaced the device and changed credentials.· 1 source
• In September, a second engineer downloaded a malicious code repository after what Binance says was a fake job interview involving a fictitious company.· 1 source
• Binance says the attacker used compromised computers, stolen credentials and an internal AI tool to access wallet-development systems before triggering the theft on October 29.· 1 source
• The FBI blamed a North Korean hacking group, which North Korea rejected, according to the report. Binance says it is repaying customers who lost funds and plans more security investment.· 1 source