[In-depth] Full postmortem of the largest hack in history: a $6.3 billion attack that all began with a “fake job interview”
Details emerge about the theft of $BNB from Binance. The attack chain lay dormant for as long as five months:
① June: Engineer A downloaded a compromised version of Homebrew while installing an AI coding tool. Although the device was replaced, the information had already been leaked.
② September: Engineer B downloaded a malicious code repository during a “fake job interview,” compromising their work computer.
③ October 20: Using the compromised device and internal AI tools, the attacker located a container deployment token.
④ October 29: Stolen credentials were used to deploy a container and initiate unauthorized transfers through the wallet signing service.
Key figures: Of the approximately $6 billion in losses, 95% has been covered by the exchange, leaving users with no losses. However, net outflows reached $5.3 billion after the incident, and recovery is still underway.
CZ warns that 40+ companies have been attacked in the past 30 days: “The only way to fight the AI monster is to become the monster.” The security arms race has officially entered the age of AI, and $BNB may herald a reshaping of the security narrative.
NFA | DYOR
#币安 #比特币 #区块链安全 #加密货币 #Web3
Details emerge about the theft of $BNB from Binance. The attack chain lay dormant for as long as five months:
① June: Engineer A downloaded a compromised version of Homebrew while installing an AI coding tool. Although the device was replaced, the information had already been leaked.
② September: Engineer B downloaded a malicious code repository during a “fake job interview,” compromising their work computer.
③ October 20: Using the compromised device and internal AI tools, the attacker located a container deployment token.
④ October 29: Stolen credentials were used to deploy a container and initiate unauthorized transfers through the wallet signing service.
Key figures: Of the approximately $6 billion in losses, 95% has been covered by the exchange, leaving users with no losses. However, net outflows reached $5.3 billion after the incident, and recovery is still underway.
CZ warns that 40+ companies have been attacked in the past 30 days: “The only way to fight the AI monster is to become the monster.” The security arms race has officially entered the age of AI, and $BNB may herald a reshaping of the security narrative.
NFA | DYOR
#币安 #比特币 #区块链安全 #加密货币 #Web3