Binance released a preliminary investigation report retracing how North Korean hackers got in
It started with a Binance software engineer whose résumé was posted on a job-hunting website. Someone claiming to be a project director reached out to discuss a role. During the HR video interview, the interviewer showed their face and shared a social media account featuring personal photos. In the second round, the engineer spoke with someone claiming to be the CEO on a chat app. The company was actually fake.
As the interview was wrapping up, the person sent over a coding challenge as a technical test. The engineer downloaded and ran it on their work computer. During installation, the code ran automatically, replacing the development tool pyenv with a trojanized version. It connected to the hackers’ server and could even erase its own traces. The antivirus software at the time didn’t detect it.
Starting with that computer, the hackers gradually infiltrated Binance’s internal systems. $BNB
It started with a Binance software engineer whose résumé was posted on a job-hunting website. Someone claiming to be a project director reached out to discuss a role. During the HR video interview, the interviewer showed their face and shared a social media account featuring personal photos. In the second round, the engineer spoke with someone claiming to be the CEO on a chat app. The company was actually fake.
As the interview was wrapping up, the person sent over a coding challenge as a technical test. The engineer downloaded and ran it on their work computer. During installation, the code ran automatically, replacing the development tool pyenv with a trojanized version. It connected to the hackers’ server and could even erase its own traces. The antivirus software at the time didn’t detect it.
Starting with that computer, the hackers gradually infiltrated Binance’s internal systems. $BNB