$6 billion Binance hack started with a fake job interview

Binance, the cryptocurrency exchange, disclosed details about a $6.3 billion hack that occurred last week. According to the company, the crime was traced to a North Korean hacking group. The hackers employed social engineering tactics to initiate the attack. They approached a Binance employee, posing as an interviewer for a fictitious job at another company. This recruitment ploy was part of a broader strategy to gain access to Binance's systems.

In a separate incident, a Binance engineer was contacted on a job-hunting platform and went through multiple rounds of interviews with what turned out to be a nonexistent company. After establishing trust, the hacker, posing as the company's employee, requested the engineer to download an assignment file as part of the interview process. This file contained malicious code. The hacker then utilized the compromised engineer's computer to gain access to other Binance employees' systems.

Days before Halloween, the attacker, having accessed the third engineer's computer using credentials stolen from the first engineer, executed the attack that resulted in the theft of over $6 billion. Binance revealed that $2.85 billion in digital assets have been frozen or intercepted. The exchange stated it would absorb the financial impact and reimburse its users for the stolen funds.

This incident highlights the effectiveness of a single cybersecurity failure, facilitated by a fake job interview scam, in compromising a major financial institution.