North Korean hackers steal $6.3B from Binance via fake job interview

North Korea stole $6.3 billion from Binance by inviting one of its engineers to a job interview at a company that didn't exist. And the guy didn't even have access to the money. It took them five months and two separate hacks to pull this off. Back in June, an engineer on Binance's wallet team went looking for an AI tool and installed a tampered Homebrew package. Binance caught it, swapped the laptop and reset the passwords. Problem solved, they figured. Except by then the attackers already knew who worked on that team and what each person did. So they went recruiting. In September a different Binance engineer got a message on a real job site from someone calling himself a project director. First round was a video call with a fake HR person, who even shared a social media account full of…

Two days before North Korea robbed the world's biggest crypto exchange of $6.3 billion, the exchange posted that it had just fought off North Korean hackers and hadn't lost a cent. The hackers were already inside, and they'd been there for weeks. Binance put out its own report on the hack this week, and it lays out the whole timeline. Back in September, North Korea got one of Binance's engineers to interview for a job at a company that didn't exist. At the end, the fake "CEO" had him download a coding assignment onto his work laptop. It was loaded with brand new malware, and Binance's security software never noticed. Then they took their time. On October 20 they used his laptop and one of Binance's own internal AI tools to get onto two more computers, both belonging to engineers who work…