Hackers who stole a record 6.3 billion dollars from Binance used fake job interviews and a compromised internal AI tool, the cryptocurrency exchange has revealed. Initial findings published by the firm indicate that the attackers gained access to its systems through a sophisticated, multi-stage campaign.
Social Engineering and Fake Interviews
As reported by BBC News, Binance stated that hackers targeted its engineers using social engineering techniques, such as phishing to trick individuals into parting with sensitive information. One engineer was contacted through a legitimate job-hunting platform and invited to bogus job interviews by fake company representatives.
The perpetrators built trust by sharing social media accounts containing personal images. During a second interview, the engineer was instructed to download malware disguised as an assignment, which deployed malicious code designed to evade detection.
Binance explained that the hackers then leveraged the compromised computer and a compromised internal AI tool in October to take control of two other engineers’ laptops and execute further steps of the attack. The security incident forced Binance to suspend global customer withdrawals until services were restored on Sunday, after which users withdrew billions in assets.
FBI Investigation and North Korea Link
Binance stated that it had taken steps following the incident, including working with law enforcement to trace and freeze affected assets. The company set aside more than 100 percent of the funds needed to cover the loss, with 98 percent of impacted token assets replenished by Saturday.
US crime agencies, including the FBI and the Secret Service, have assisted Binance in tracing the stolen crypto. Cyber analysts and US agencies noted the breach bore the signs of being orchestrated by North Korea.
Binance wrote in a post on X that the latest information released by the FBI indicates that North Korea is responsible for the incident. Pyongyang denied involvement on Tuesday, with senior official Kim Yo Jong calling the accusations a sinister US attempt to damage the country’s public image.
Binance stated it will increase investment in AI tools to detect security threats, engage third-party cyber experts for a full-scale review, establish a security research fund, and collaborate with leading AI and security firms.
