Binance $6.3bn Hack Used Fake Job Interviews and Malware
The world's largest crypto exchange details a months-long breach that began with a malware download and ended in a massive wallet raid.
Binance, the world's largest cryptocurrency exchange, has disclosed that hackers stole $6.3 billion in a sophisticated, multi-stage operation that unfolded over several months, combining malware, fraudulent recruitment tactics and exploitation of an internal artificial intelligence tool.
According to the company, the breach began in June when an employee inadvertently downloaded malicious software. The operation escalated in September through a fake job interview scheme, a social engineering technique increasingly favored by cybercriminals to gain access to corporate systems under the guise of legitimate hiring activity.
Read more 3M Agrees to $7.35 Billion Settlement Over PFAS Chemical Claims →
The culminating blow came last week when attackers raided Binance's "hot wallets" — internet-connected storage accounts that hold crypto-assets available for active trading — making off with billions of dollars worth of digital currency. Hot wallets, by design more accessible than offline "cold" storage, have historically been a preferred target in large-scale exchange hacks.
The disclosure sheds light on the growing complexity of attacks targeting crypto infrastructure, where threat actors invest significant time and planning rather than exploiting simple technical vulnerabilities. The use of an internal AI tool as part of the compromise adds a layer of concern about how legitimate platforms' own technologies can be turned against them, though Binance did not elaborate on the precise role the tool played.
Continue reading at Business | The Guardian.
