Binance says a preliminary investigation into the October 29 attack, which caused losses of about $6.3 billion, found that the attacker started with a fake recruitment process.

In September, a Binance software engineer was contacted through a legitimate recruitment platform. After two fake interviews, the engineer was asked to download a code repository onto their work computer as an “assignment.” The repository contained a trojan that exploited a zero-day vulnerability and bypassed the device’s security defenses.

The attackers then used the compromised device and internal AI tools to take control of the computers of two other wallet engineers, steal deployment credentials, and run money-transferring malware on October 29. Binance said it had frozen or blocked approximately $2.85 billion and compensated for 98% of the affected assets.

The report says this method closely resembles the theft of approximately $625 million from the Ronin cross-chain bridge in March 2022. At the time, the North Korea-linked Lazarus Group approached a senior Sky Mavis engineer with a fake job offer, then sent a trojan-infected file to seize control of the private keys belonging to validator nodes.

Binance said it has detected and prevented 57 cyberattacks suspected of being linked to North Korea since the beginning of the year. The methods included fake interviews, malware disguised as development tools, and tampered software packages and browser extensions.

Source: https://tintucbitcoin.com/vu-hack-binance-bat-dau-tu-tuyen-dung-gia-giong-vu-axie-2022/

Thank you for reading this article!

Please Like, Comment, and Follow TinTucBitcoin to stay up to date with the latest news about the cryptocurrency market and not miss any important information!

$BTC $ETH $BNB $XRP $SOL