Binance says attackers used fake job-related downloads and a trojanized installer for a popular AI tool to compromise members of its wallet infrastructure team. The campaign ultimately gave the attackers access to an internal wallet-signing service and enabled a $6.43 billion theft outside the normal withdrawal process.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
A fake job interview helped open the door to Binance’s wallet systems. One engineer found a trojanized Homebrew installer while searching for an AI tool. Another got a recruiter’s coding assignment. Its setup ran malicious code. Here’s the trap: setup wasn’t a skills test. The compromise led to a stolen deployment token, wallet-signing access, and transactions outside normal withdrawals. Before running any interview assignment or AI-tool installer, verify its source through a trusted company channel.
Attackers linked to North Korea used a fake recruiting process to trick a Binance engineer into downloading a coding assignment onto a work computer. The malicious assignment gave the attackers a foothold, which they expanded through an internal AI tool and privileged engineering access to carry…
Attackers linked to North Korea reportedly used a fake recruiting process to trick a Binance software engineer into downloading and running a malicious code repository during a supposed job assessment. The compromise ultimately helped the attackers access Binance’s wallet systems and steal about…
North Korean attackers reportedly used a convincing fake recruiting process to persuade a Binance software engineer to download a malware-laced coding assignment onto a work computer. The compromise later gave the attackers access to wallet infrastructure and was used in the reported $6.3 billion…
Attackers reportedly used a fake job opportunity to trick a Binance software engineer into running a coding assignment on a work computer. The assignment installed malicious software, helping the attackers move through Binance systems and ultimately steal about $6.3 billion in cryptocurrency. The…
Attackers reportedly used a fake recruiting process to target Binance software engineers over several months. They built trust through a legitimate job platform and a fake HR interview, then persuaded an engineer to download a malicious coding assignment onto a work computer. That access was later…
Binance says attackers used a fake recruitment process to trick an engineer into downloading a malicious coding assignment onto a work computer. The attackers also used a tampered developer-tool installer and later abused internal access to carry out unauthorized wallet transactions, resulting in…
