Technology1 min read

Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist

By · Via TechCrunch · Published by Everything Blog

In short

The historic breach originated when cyber operatives posed as job recruiters to trick a Binance wallet engineer into downloading malware disguised as a coding test during fake interviews. The malicious software bypassed internal security tools, allowing the hackers to navigate across the wallet team's computers until reaching a system with direct access to the funds. In response, the exchange has suspended customer withdrawals, upgraded its internal network security, and engaged outside cybersecurity experts to review the incident.

Key points

  • North Korean cyber units continue to execute elaborate employment lures to fund their nat…: North Korean cyber units continue to execute elaborate employment lures to fund their nation's nuclear weapons program.
  • Infiltrating a single employee's workstation enabled hackers to pivot laterally into crit…: Infiltrating a single employee's workstation enabled hackers to pivot laterally into critical systems controlling platform reserves.
  • Binance has upgraded its overall network defenses and enlisted external cybersecurity spe…: Binance has upgraded its overall network defenses and enlisted external cybersecurity specialists to conduct an intrusion review.

Sources checked by our analysis pipeline: 1

Crypto giant Binance says North Korean hackers used fake social media profiles and the lure of a potential job offer as part of a months-long scheme aimed at tricking an employee into downloading malicious software onto their laptop.

Researchers have repeatedly warned about long-running social engineering attacks that can go on for months.

This latest attack allowed the hackers to patiently worm their way into Binance’s systems to steal a record $6.3 billion in crypto last week, the company has now confirmed. The hack, disclosed in an updated statement posted on X on Tuesday, prompted the world’s largest crypto exchange to suspend customer withdrawals across its network.

The FBI and blockchain investigators have blamed North Korea for the heist. The country has been long accused of carrying out massive cryptocurrency thefts in recent years to fund its internationally sanctioned nuclear weapons program.

In its latest statement, Binance said that North Korean hackers, posing as recruiters hiring for a job, contacted a software engineer who works on wallets at the company. Following two interviews with the purported company, the engineer was…

Technology