Binance confirms record $6,3 billion theft by North Korean hackers
Binance confirms North Korean hackers stole $6.3 billion in crypto after compromising a wallet engineer via a fake recruitment interview and malicious coding assignment. Read how the initial foothold bypassed endpoint d
Binance confirms North Korean hackers stole $6.3 billion in crypto after compromising a wallet engineer via a fake recruitment interview and malicious coding assignment.
Read how the initial foothold bypassed endpoint detection and led to internal access.
How the trap was set
According to the company, the attackers approached a software engineer working on the digital wallet team, posing as recruiters. After two fake interviews, they asked him to download a programming test.
The file contained a dangerous program that was installed on the employee's work computer without being detected by Binance's security systems.
The path of hackers within systems
Access to the first computer allowed the perpetrators to use an internal company tool to gain access to the computers of two more engineers from the same team.
β³
READ ALSO
HACKS.GR / RELATED
Cyber ββAttacks & Data Breaches
Systems breach at Chainstack following cyberattack
β
One of them had downloaded a fake password-stealing app from a search engine months earlier. The attackers used the stolen credentials to break into the device of a third-party engineer, who had access to systems capable of controlling billions of dollars.
The company's reaction
Binance admitted that the attack should not have happened and said it has already improved its network security. According to the company, it has dealt with at least 57 suspected attacks from North Korea, and plans to bring in independent security experts to review the incident and implement new protections.
The FBI and researchers monitoring movements in cryptocurrency networks have blamed North Korea.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
β
end of article
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes β full credit and traffic to the original publisher.