{
  "id": 18008688,
  "title": "Binance says fake job interviews, AI tool used in US$6 bln theft blamed on N. Korea",
  "url": "https://urgent.news/2026/11/03/binance-says-fake-job-interviews-ai-tool-used-in-us-6-bln-theft",
  "topic": "ai",
  "section": "AI",
  "published": "2026-11-03T18:51:51.000Z",
  "source": {
    "name": "Yonhap News",
    "slug": "yonhap-news",
    "url": "https://en.yna.co.kr/view/AEN20261104000400315"
  },
  "original_language": "en",
  "account": "Binance, the world's largest cryptocurrency exchange, reported on November 3 that hackers employed fake job interviews and an internal AI tool to execute a cyberattack resulting in the theft of over $6.34 billion in digital assets last week. The U.S. Federal Bureau of Investigation (FBI) has implicated North Korea in this incident, identifying the perpetrators as a North Korean hacking group known as TraderTraitor, a name previously associated with other cryptocurrency thefts.\n\nAccording to Binance's latest findings, the multi-stage operation involved fake interviews and an internal AI tool, suspected to have begun as early as June. In September, a fraudulent recruiter on a job platform conducted video interviews and disseminated an assignment repository containing 0-day malware, which went unnoticed by endpoint tools, as revealed by the exchange's report.\n\nOn October 20, an internal AI tool was utilized by the attacker as a conduit to reach a container deployment token, subsequently deploying a container to initiate the attack, according to Binance. The exchange has blocked 57 suspected North Korea-linked threats this year.\n\nKim Yo-jong, the powerful sister of North Korean leader Kim Jong-un, categorically denied the FBI's findings, labeling it a \"grave political provocation\" against Pyongyang. The U.S. State Department reiterated its concerns over North Korea's use of cybercrime to finance its weapons programs. The issue of DPRK cybercrime, as North Korea is officially known, is a global problem affecting companies and jurisdictions worldwide, according to a U.S. State Department spokesman who commented on the department's stance regarding North Korea's latest claim.",
  "summary": "WASHINGTON, Nov. 3 (Yonhap) -- Binance, the world's largest cryptocurrency excha...",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 6,
    "also_reported_by": [
      {
        "outlet": "CoinDesk",
        "title": "CZ warns of more AI-driven hacks following Binance’s historic $6.4 billion heist",
        "url": "https://urgent.news/2026/11/03/cz-warns-of-more-ai-driven-hacks-following-binances-historic-6-4",
        "published": "2026-11-03T14:22:09.000Z"
      },
      {
        "outlet": "The National Business",
        "title": "Binance says fake job interviews and internal AI tool used in $6.3bn heist",
        "url": "https://urgent.news/2026/11/03/binance-says-fake-job-interviews-and-internal-ai-tool-used-in-6-3bn",
        "published": "2026-11-03T15:35:05.000Z"
      },
      {
        "outlet": "Cointelegraph",
        "title": "Binance traces $6.3B hack to fake job interviews, compromised AI tool",
        "url": "https://urgent.news/2026/11/03/binance-traces-6-3b-hack-to-fake-job-interviews-compromised-ai-tool",
        "published": "2026-11-03T16:44:06.000Z"
      },
      {
        "outlet": "The Hacker News",
        "title": "Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft",
        "url": "https://urgent.news/2026/11/03/binance-reveals-how-fake-job-interviews-and-ai-tool-abuse-led-to-6-43",
        "published": "2026-11-03T16:55:58.000Z"
      },
      {
        "outlet": "Slashdot",
        "title": "Binance Says Hackers Used Fake Job Interviews, AI Tool to Steal $6.3 Billion In Crypto",
        "url": "https://urgent.news/2026/11/03/binance-says-hackers-used-fake-job-interviews-ai-tool-to-steal-6-3",
        "published": "2026-11-03T20:00:00.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}