I read this twice, and it sent a chill down my spine.
Binance has released its preliminary investigation report, explaining how they were robbed of more than $6 billion.
It didn’t start with a wallet. It started with an engineer’s résumé.
He had his résumé posted on a job site when someone claiming to be a project director reached out. In the first interview, the HR representative appeared on camera and even shared their social media account, which was full of everyday photos. They looked like a real person.
For the second round, they switched to a messaging app the candidate used regularly. The person on the other end claimed to be the CEO, but the company was fake.
Near the end, they asked him to complete a coding challenge. He ran it on his work computer. During installation, it ran automatically and replaced pyenv with a trojanized version. It connected to an external server and even wiped its own tracks. The antivirus software didn’t catch it.
A little over a month later, the money was gone.
Last year, I also got a compressed file from a stranger for a technical interview. I was in a hurry and only realized something was wrong halfway through extracting it. Even now, thinking back on it makes my palms sweat.
I used to think something like this could never happen to me. Turns out I was wrong—it was just one double-click away.
There are still tons of Binance employees’ profiles on LinkedIn. Who do you think they’ll target next?
Binance has released its preliminary investigation report, explaining how they were robbed of more than $6 billion.
It didn’t start with a wallet. It started with an engineer’s résumé.
He had his résumé posted on a job site when someone claiming to be a project director reached out. In the first interview, the HR representative appeared on camera and even shared their social media account, which was full of everyday photos. They looked like a real person.
For the second round, they switched to a messaging app the candidate used regularly. The person on the other end claimed to be the CEO, but the company was fake.
Near the end, they asked him to complete a coding challenge. He ran it on his work computer. During installation, it ran automatically and replaced pyenv with a trojanized version. It connected to an external server and even wiped its own tracks. The antivirus software didn’t catch it.
A little over a month later, the money was gone.
Last year, I also got a compressed file from a stranger for a technical interview. I was in a hurry and only realized something was wrong halfway through extracting it. Even now, thinking back on it makes my palms sweat.
I used to think something like this could never happen to me. Turns out I was wrong—it was just one double-click away.
There are still tons of Binance employees’ profiles on LinkedIn. Who do you think they’ll target next?