Binance says fake job interviews and internal AI tool used in $6.3bn heist

Cryptocurrency platform Binance disclosed that fake job interviews and an internal AI tool were employed in the $6.3 billion heist it reported last week. The perpetrator exploited a compromised engineer's computer and utilized an AI tool to gain access to the wallets of two additional engineers, according to Binance's statement on Tuesday.

The attack, which took place on October 20, employed various techniques such as social engineering through fraudulent recruitment interviews, malicious software distribution, compromised internal AI tools, endpoint compromise, and an advanced transaction authorization method, according to Binance. The company has implemented measures to safeguard its systems, including rebuilding the impacted wallet system in a new environment and revoking access controls for affected devices and credentials.

Furthermore, Binance has replaced the compromised devices and decommissioned the tokens associated with the affected engineers. Binance has pledged to bear the financial burden of the stolen funds instead of imposing the losses on its customers. The FBI attributed the cyberattack to TraderTraitor, a North Korean state-sponsored hacking unit, which subsequently converted the stolen assets into ether and is anticipated to continue laundered through related technology.