Binance says a North Korea-linked group spent months compromising wallet engineers before stealing $6.34 billion in cryptocurrency. One engineer was drawn into a fake recruiting process, built trust with a supposed HR representative and CEO, then downloaded a malicious coding assignment onto a work computer. The attackers later used compromised systems and stolen deployment credentials to access wallet-signing infrastructure.
Mirage safely runs attacks like this one against your own team, so you find out what happens before a real adversary does.
A fake job interview helped open a path to Binance’s wallet systems. A supposed project director arranged interviews with HR and the CEO. The HR profile had personal photos and videos. Then came a coding assignment to download onto a work computer. The company didn’t exist. Setting up the repository ran malicious code and swapped a developer-tool component. Compromised devices and stolen credentials later helped reach wallet-signing infrastructure. That’s the tell: the interview became a software install. Before any interview code touches your work device, send it for security review.
Binance says attackers linked by U.S. agencies to North Korea used fake recruitment interviews to trick a software engineer into downloading a malicious coding assignment. The compromise spread from one employee device to other systems and ultimately enabled unauthorized cryptocurrency transfers…
Attackers reportedly used a fake job opportunity to trick a Binance software engineer into running a coding assignment on a work computer. The assignment installed malicious software, helping the attackers move through Binance systems and ultimately steal about $6.3 billion in cryptocurrency. The…
Binance says North Korean-linked attackers used a fake recruiting process to trick an engineer into downloading a malicious coding assignment. The attackers then spent weeks moving through internal systems before abusing a wallet-signing service to move funds outside normal withdrawal controls.…
Attackers linked to North Korea reportedly used a fake recruiting process to trick a Binance software engineer into downloading and running a malicious code repository during a supposed job assessment. The compromise ultimately helped the attackers access Binance’s wallet systems and steal about…
North Korean attackers reportedly used a convincing fake recruiting process to persuade a Binance software engineer to download a malware-laced coding assignment onto a work computer. The compromise later gave the attackers access to wallet infrastructure and was used in the reported $6.3 billion…
Attackers linked to North Korea reportedly used fake recruitment interviews to trick Binance engineers into downloading malicious software. They then used a compromised engineer laptop and access to an internal AI tool to take over employee wallets and steal $6.3 billion in cryptocurrency.
