{
  "id": 18030276,
  "title": "North Korean fake job interview led to $6.3B Binance heist",
  "url": "https://urgent.news/2026/11/03/north-korean-fake-job-interview-led-to-6-3b-binance-heist",
  "topic": "science",
  "section": "Science",
  "published": "2026-11-03T22:04:45.000Z",
  "source": {
    "name": "The Register Science",
    "slug": "the-register-science",
    "url": "https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398"
  },
  "original_language": "en",
  "account": "Last week, North Korean hackers orchestrated a massive $6.3 billion heist from Binance's cryptocurrency exchange. The attack was the culmination of a multi-stage, sophisticated campaign, utilizing social engineering, malware downloads, compromised internal AI tooling, endpoint takeover, and an advanced transaction-authorization method. Binance's incident report published on Tuesday detailed the malicious activities, stating that the attack was not a single isolated breach but rather a series of interconnected breaches.\n\nThe cybercriminals, known as TraderTraitor and linked to North Korea's Lazarus Group, began preparations for the attack as early as June. They infiltrated Binance by tricking a software engineer into downloading malware during a fake job interview process. The incident report highlighted the deceptive nature of the social engineering techniques employed, including a convincing live video interview with a fake HR representative, who shared personal photos and videos to build trust.\n\nThe malware was designed to replace a legitimate development tool component with a malicious version, execute commands, and communicate with an attacker-controlled external server. This malware was installed on Binance's work-issued computer, allowing the attackers to gain access to the company's internal AI tool and compromise multiple wallets.\n\nAfter months of planning, the hackers launched the attack on October 29, using compromised credentials to access Engineer C's computer. They then deployed a container, triggered a script to steal cryptocurrency, and stole $6.3 billion from Binance's wallets. Binance has since rebuilt its compromised wallet system, replaced all affected devices, and decommissioned all credentials and tokens assigned to the compromised engineers. The exchange is collaborating with law enforcement, blockchain intel firms, and security researchers to trace and freeze the stolen assets.",
  "summary": "'It was not a single isolated breach or a simple phishing incident,' exchange says",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 6,
    "also_reported_by": [
      {
        "outlet": "Investing.com",
        "title": "Binance sees outflows stabilising as exchange returns online after $6.3 billion heist",
        "url": "https://urgent.news/2026/11/02/binance-sees-outflows-stabilising-as-exchange-returns-online-after-6",
        "published": "2026-11-02T02:24:25.000Z"
      },
      {
        "outlet": "Economic Times Tech",
        "title": "Binance sees outflows stabilising as exchange returns online after $6.3 billion heist",
        "url": "https://urgent.news/2026/11/02/binance-sees-outflows-stabilising-as-exchange-returns-online-after-6-17733526",
        "published": "2026-11-02T02:45:13.000Z"
      },
      {
        "outlet": "The Indian Express",
        "title": "Binance sees outflows stabilising as exchange returns online after $6.3 billion heist",
        "url": "https://urgent.news/2026/11/02/binance-sees-outflows-stabilising-as-exchange-returns-online-after-6-17737156",
        "published": "2026-11-02T03:42:46.000Z"
      },
      {
        "outlet": "Channel News Asia",
        "title": "Binance sees outflows stabilising as exchange returns online after US$6.3 billion heist",
        "url": "https://urgent.news/2026/11/02/binance-sees-outflows-stabilising-as-exchange-returns-online-after-us",
        "published": "2026-11-02T03:47:40.000Z"
      },
      {
        "outlet": "The Hindu - Sci-Tech",
        "title": "Binance sees outflows stabilising as exchange returns online after $6.3 billion heist",
        "url": "https://urgent.news/2026/11/02/binance-sees-outflows-stabilising-as-exchange-returns-online-after-6-17747156",
        "published": "2026-11-02T05:07:34.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}