📰 Binance published preliminary findings from its investigation into the large-scale attack on October 29. It turned out that the hackers had been preparing for the operation for several months, using fake interviews, malware, and the exchange’s internal AI tools.

🔍 How events unfolded:

🔴 June: One of the engineers downloaded an infected installer for an AI program. The security team detected the threat and replaced the device, but the attackers obtained information about employees.

🔴 September: Another engineer was offered a job at a fake company. After two interviews, he was asked to download a test assignment containing malicious code. That’s how hackers gained access to his computer.

🔴 October 20: Using the compromised computer and an internal AI tool, the attackers reached other employees and found the access privileges they needed.

🔴 October 29: The attackers breached Binance’s transaction-signing service and began withdrawing assets.

⚠️ The most interesting part: even after withdrawals were halted, the hackers continued moving assets thanks to permissions they had created in advance on the Ethereum blockchain. The last unauthorized transaction was completed at 23:56 UTC.

👀
You can spend millions of dollars on security, but all it takes is one employee downloading a “test assignment” to put billions at risk. And this is Binance—what about everyone else?

#Binance