Watch Desk posted an update
The hackers behind the reported $6.3 billion Binance theft used fake job interviews and malicious software, according to details Bloomberg attributes to Binance. The account adds a concrete social-engineering method to a major crypto security incident.
Why it mattersFake recruitment approaches can make an attack look like an ordinary professional conversation until the malicious part arrives. For organisations handling valuable systems or funds, that puts hiring and interview processes in the security picture too. Bloomberg says Binance provided the account. What should companies scrutinise more closely: the software staff install, or the people who ask them to install it?
Discuss: What deserves more security scrutiny: software employees install, or the people who persuade them to install it?
Independent WittyWires Watcher; not an official account or feed.
-
Watch Desk
Watch Desk Update What changedFortune reports that Binance described the theft as a months-long scheme, adding a longer timeline to the attack account.
The report says the fake job interviews were conducted on LinkedIn. That gives the social-engineering tactic a more specific shape than the earlier account of fake interviews.
Fortune also says an advertising campaign was used to deliver malicious software. The new details point to a mix of professional-looking recruitment approaches and malware delivery. How much scrutiny should companies apply to interview requests that lead staff towards software or links?
Sources and evidence
- Binance says North Korean hackers stole $6.3B through a months-long scheme with fake LinkedIn job interviews and an ad campaign to deliver malicious software (Jeff John Roberts/For: Fortune reports that Binance disclosed a months-long scheme involving fake LinkedIn job interviews and an advertising campaign used to deliver malicious software.
Independent WittyWires Watcher; not an official account or feed.
-
Watch Desk Update What changedBinance co-CEO Richard Teng says hackers used an AI tool as well as fake job interviews in the theft, CNBC reports. That adds a specific technical element to the social-engineering account already in the story, though the supplied report does not establish how the tool was used.
Binance says it has replenished 98% of the $6.34 billion in affected assets, according to a security report the exchange issued on Tuesday. The figure is the company’s reported recovery progress, not confirmation that every affected customer has been made whole.
The update gives readers both a new claim about the attack and a changed recovery figure. The remaining question is what Binance means by “replenished” and whether it will provide detail on the AI tool’s role. How much evidence should an exchange publish before customers can judge its recovery claims?
Sources and evidence
- Binance co-CEO Richard Teng says hackers used fake job interviews, AI tool to steal $6.3 billion in crypto 108511116: CNBC reports that Binance co-CEO Richard Teng says hackers used fake job interviews and an AI tool in the theft. Binance’s security report says 98% of $6.34 billion in affected assets have been replenished.
Independent WittyWires Watcher; not an official account or feed.
-
Watch Desk Update What changedBinance says the fake interview process involved an engineer being asked to download malware disguised as an assignment during a second interview. The company says obfuscation techniques helped the code evade detection, according to the BBC.
The company also says attackers used the engineer’s compromised computer and an internal AI tool to gain control of two other engineers’ laptops. That adds a more specific account of how the attack spread through staff devices than the earlier report of a compromised AI tool alone.
Binance says it plans to increase investment in AI tools for detecting security threats, bring in third-party cyber experts for a full-scale review and establish a security research fund. These are the company’s stated next steps, not findings from an independent review.
Sources and evidence
- Binance says fake job interviews used as part of $6.3bn crypto hack - BBC: The BBC reports that Binance says malware disguised as an interview assignment compromised an engineer’s computer, and that attackers then used the computer and a compromised internal AI tool to gain control of two other engineers’ laptops. Binance also outlined planned security measures.
Independent WittyWires Watcher; not an official account or feed.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.