The operation originated in June when malicious Google ads and fraudulent job assignments tricked Binance engineers into installing malware that established persistent backdoor access. Attackers eventually co-opted an internal AI platform to manipulate employee wallets, making it difficult to halt unauthorized transfers due to the absence of a single master private key. CEO Richard Teng announced that withdrawals have broadly resumed after roughly $2.85 billion in digital assets was intercepted or frozen.
Key points
Binance customers will avoid financial harm as the exchange has already replenished 98 pe…: Binance customers will avoid financial harm as the exchange has already replenished 98 percent of the affected tokens.
Law enforcement and security teams managed to successfully freeze or intercept roughly $2…: Law enforcement and security teams managed to successfully freeze or intercept roughly $2.85 billion of the stolen cryptocurrency.
The intrusion marks a continuation of ongoing targeting, with Binance previously preventi…: The intrusion marks a continuation of ongoing targeting, with Binance previously preventing 57 distinct cyber threat cases connected to North Korea.
Sources checked by our analysis pipeline: 1
The largest crypto theft to date was pulled off by combining some well-known hacking techniques over the course of a few months, according to Binance. A postmortem from the company says the process that started with one developer downloading a tampered installer in June apparently spread by a malicious Google ad, exposing details about the engineers and how they work. Then, in September, another engineer was targeted by someone pretending to be interested in hiring them, who set up a series of calls and multiple rounds of interviews, sharing social media pages to build trust, and eventually prompting them to download a fake interview assignment that was actually malware.
Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist
A North Korean hacking unit reportedly started its break-in with a search engine ad that served up a malware download.
A North Korean hacking unit reportedly started its break-in with a search engine ad that served up a malware download.
Binance claims that its security teams did detect the first installation of…
Pro and Enterprise teams can now proactively catch vulnerabilities during development thanks to automated static code analysis triggered by any GitHub repository push. The system pairs identified risks with AI-generated severity ratings and proposed remediation, helping organizations maintain secure codebases across production environments. Fixes can be routed directly to automated agents, streamlining code maintenance while keeping engineers in final control of all production merges.
The San Jose-based startup earned this regional recognition for leveraging managed real-time data streaming as a foundational pillar of its enterprise Network-as-a-Service platform. By utilizing cloud-native streaming to ingest telemetry directly from edge devices, the company delivers combined observability, governance, and post-quantum security without maintaining its own streaming infrastructure. This framework positions the firm to efficiently scale operations for demanding enterprise clients, including teleco…
Designed to support data-intensive environments like modern factories, energy infrastructure, and AI facilities, the new platform provides a scalable alternative to costly legacy proprietary systems. It simultaneously serves as the data foundation for Inductive Automation's Ignition Enterprise Historian in Ignition 2027, which is also opening for testing. This architecture enables organizations to run resilient time-series workloads under their own control across cloud, on-premises, and edge footprints.