Binance's $6.3B Hack Started With a Fake Job Interview
• Binance's incident report describes a months-long campaign. In June, an engineer installed a tampered package while setting up an AI coding tool.
• In September, attackers posing as recruiters got another engineer to run malware disguised as a coding test.
• On Oct 20, they used an internal AI tool to reach two more engineers and grab deployment credentials, then hit the signing service on Oct 29.
• Binance says it blocked 57 suspected North Korean attempts in 2026. North Korea denies involvement.
If a job offer comes with a test you must download, treat it as an attack.
Not investment advice. DYOR.
• Binance's incident report describes a months-long campaign. In June, an engineer installed a tampered package while setting up an AI coding tool.
• In September, attackers posing as recruiters got another engineer to run malware disguised as a coding test.
• On Oct 20, they used an internal AI tool to reach two more engineers and grab deployment credentials, then hit the signing service on Oct 29.
• Binance says it blocked 57 suspected North Korean attempts in 2026. North Korea denies involvement.
If a job offer comes with a test you must download, treat it as an attack.
Not investment advice. DYOR.
