A sophisticated cyber-attack targeting cryptocurrency exchange Binance involved fake recruitment interviews, malware, and an internal AI tool according to details released by the company.
Multi-Stage Recruitment Scam Exposed
According to The Guardian, the intrusion began in June when a company engineer inadvertently downloaded malware that revealed team roles responsible for wallet infrastructure.
The attack escalated in September through a social engineering scheme. A fake project director approached another engineer on a job-hunting platform, leading to video interviews with a sham HR representative and a second interview with a fictitious chief executive. During this second meeting, the engineer was tricked into installing malicious software.
System Compromise and Wallet Breach
By 20 October, the attacker used the compromised computer and an internal AI tool to take control of systems belonging to two wallet developers. On 29 October, the attacker used stolen credentials to execute a malicious script that drained digital assets from the platform’s hot wallets.
Binance reported that approximately $2.85bn of the $6.34bn targeted in the attack has been frozen or intercepted.
Attribution and International Response
The FBI attributed the operation to North Korean hackers. However, North Korean officials rejected the accusation via state news agency KCNA, calling the statement absurd rhetoric.
For UK cryptocurrency users, this incident underlines the importance of security awareness regarding digital asset custody and exchange platforms. You can read more about previous exchange investigations on UK Bitcoin Blog.
Main picture: Photo by Jakub Żerdzicki on Unsplash
Be First to Comment