Binance says hackers who stole billions in crypto spent months planning heist
Techniques included laptop infections, compromised internal tooling, and fake job interviews.
Hackers who plundered billions of dollars worth of cryptocurrency from the Binance exchange had been meticulously planning their theft for months, according to the company. Binance disclosed on Tuesday that the cybercriminals utilized both social engineering tactics and cutting-edge malware during the heist. The FBI and TRM Security, a separate firm, have both linked the incident to North Korean actors.
The breach initially targeted $6.34 billion in cryptocurrency held in Binance wallets, but the exchange has since frozen or reclaimed $2.85 billion of that amount. Binance has allocated funds to cover the losses incurred and provided a link to a Proof of Reserves page. This represents the largest sum ever targeted in a cryptocurrency theft.
Advanced persistent threat actors allegedly began their operations in June and continued until the heist was successfully executed on the last Thursday, when they compromised an engineer's laptop and withdrew assets from several wallets. Binance described the threat actors as highly sophisticated and resourceful, a common trait in organizations that suffer major, public hacks.
Written by urgent.news from Ars Technica's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.