Can a fake job interview steal $6.34 billion? This generation of hackers isn’t breaking into code—they’re targeting people instead.
Binance’s preliminary investigation on November 3 said the entry point for the theft of $6.34 billion in assets was a fake job interview. The FBI attributed it to North Korea’s TraderTraitor, while Kim Yo Jong publicly denied the accusation on behalf of North Korea. Starting in June, the attackers infiltrated systems using tampered Homebrew installation packages and malicious code disguised as recruitment materials. From October 20 to 30, alerts blocked their activity internally, though this was not disclosed.
Binance had previously disclosed on October 27 that it had blocked 57 attacks linked to North Korea, saying its systems had not been compromised and no assets had been lost. Yet just three days later, the attackers still broke through. He Yi responded that cybersecurity is a continuous process of adaptation, and that monitoring failed this time because hackers are evolving too.
What to watch, part one: If withdrawals proceed smoothly and the platform provides verifiable compensation and remediation milestones, sentiment may gradually recover. Part two: If there is only an attribution statement and no concrete plan, short-term sentiment around BNB may remain under pressure.
Are you more focused on whether withdrawals are proceeding smoothly, or on whether remediation and compensation milestones are delivered?
Source: PANews
Image 1: Binance’s $6.34 billion theft: phishing through a fake interview, US points to North Korea · Image accompanying the source report
Image source: https://www.panewslab.com/zh/articles/01a1a976-c80e-749e-9a49-b45c2b3408f3
Binance’s preliminary investigation on November 3 said the entry point for the theft of $6.34 billion in assets was a fake job interview. The FBI attributed it to North Korea’s TraderTraitor, while Kim Yo Jong publicly denied the accusation on behalf of North Korea. Starting in June, the attackers infiltrated systems using tampered Homebrew installation packages and malicious code disguised as recruitment materials. From October 20 to 30, alerts blocked their activity internally, though this was not disclosed.
Binance had previously disclosed on October 27 that it had blocked 57 attacks linked to North Korea, saying its systems had not been compromised and no assets had been lost. Yet just three days later, the attackers still broke through. He Yi responded that cybersecurity is a continuous process of adaptation, and that monitoring failed this time because hackers are evolving too.
What to watch, part one: If withdrawals proceed smoothly and the platform provides verifiable compensation and remediation milestones, sentiment may gradually recover. Part two: If there is only an attribution statement and no concrete plan, short-term sentiment around BNB may remain under pressure.
Are you more focused on whether withdrawals are proceeding smoothly, or on whether remediation and compensation milestones are delivered?
Source: PANews
Image 1: Binance’s $6.34 billion theft: phishing through a fake interview, US points to North Korea · Image accompanying the source report
Image source: https://www.panewslab.com/zh/articles/01a1a976-c80e-749e-9a49-b45c2b3408f3
