EVERYTHING GETS HACKED: Binance says hackers used fake job interviews to pull off a $6 billion crypto heist.
According to Binance, the heist operation began in June when an engineer on its wallet infrastructure team downloaded a tampered version of an AI coding tool.
The company said its security team detected the issue, replaced the device, and changed all related credentials, but the employee’s role and those of his colleagues were exposed to hackers.
In September, one of Binance’s software engineers was contacted through what the company said was a “legitimate job-hunting platform by an individual posing as a Project Director.”
That employee had a profile on the platform that referenced his experience at Binance, the crypto exchange said.
“The purported Project Director arranged a first-round interview with a HR representative, followed by a second-round interview with an individual claiming to be the CEO of a fictitious company,” Binance said.
The Binance engineer completed a video interview with the fake HR rep, who shared a social media account with the employee filled with personal photos and videos “in order to build trust,” the company said.
During the second interview, which was conducted in a “popular social chat app,” Binance said the engineer was instructed to download an “assignment” that contained a “malicious code repository onto his work computer.”
None of this inspires much confidence in Binance.