DUBAI, United Arab Emirates—Hackers used a fake job interview to compromise a Binance software engineer and ultimately steal $6.3 billion in cryptocurrency, according to an account detailed by the exchange and reported by BankInfoSecurity.The FBI has attributed the Oct. 29 attack to TraderTraitor, a North Korean hacking group, in what has become a strong example of how social engineering can defeat sophisticated financial technology security systems.
According to BankInfoSecurity, the attackers contacted the engineer through a legitimate employment website in September, conducted two rounds of interviews and persuaded him to download what appeared to be a programming assignment onto his work computer. The download replaced a legitimate developer tool with malware that gave the hackers access to the machine. Binance said its endpoint security software failed to detect the malware, allowing the attackers to begin moving deeper into the exchange’s systems.BankInfoSecurity reported that the hackers subsequently exploited access to Binance’s internal artificial intelligence tools and compromised additional employees involved in managing cryptocurrency wallets. Using a stolen access token, the attackers gained access to an internal wallet-signing service that allowed them to authorize transfers outside normal withdrawal procedures. On Oct. 29, they began transferring cryptocurrency from internet-connected wallets, including bitcoin, XRP and Ethereum-based assets. Binance attempted to shut down withdrawals and revoke the attackers’ authorization, but blockchain-based approvals complicated those efforts, allowing unauthorized transfers to continue for hours.The financial damage was enormous, although BankInfoSecurity reported that Binance and its partners had frozen or intercepted approximately $2.85 billion of the stolen funds. The exchange said it had replenished 98% of the affected tokens by Oct. 31. Blockchain analytics firm Elliptic reported that approximately $3.24 billion remained in addresses connected to the theft as of Monday, with relatively little converted into cash. Investigators also identified efforts to conceal the movement of stolen funds through blockchain bridges, specially created tokens and cryptocurrency mixing services. Elliptic said there was no evidence that autonomous AI agents were directing the laundering activity, despite speculation about their involvement.BankInfoSecurity noted that North Korean hackers have repeatedly used fraudulent employment opportunities to compromise employees, with Chainalysis linking more than $14.3 million in previous losses to similar schemes.
Section: StandardWord Count: 438Copyright Holder: CUToday.infoCopyright Year: 2026Is Based On: URL: https://www.cutoday.info/Fresh-Today/Fake-Job-Interview-Opened-Door-To-6.3B-Binance-Hack-North-Korea-Blamed(function (d, s, id) {
var js, fjs = d.getElementsByTagName(s)[0];
if (d.getElementById(id))
return;
js = d.createElement(s);
js.id = id;
js.src = “//connect.facebook.net/en_US/all.js#xfbml=1”;
fjs.parentNode.insertBefore(js, fjs);
}(document, ‘script’, ‘facebook-jssdk’));
Click Here For The Original Source.
——————————————————–
