Binance says hackers used fake job interviews to pull off a $6 billion crypto heist (www.businessinsider.com)

Binance, the leading cryptocurrency exchange, revealed a significant breach involving a $6.3 billion theft driven by a sophisticated hacking campaign allegedly linked to North Korean hackers. In a detailed recounting, Binance CEO Richard Teng noted that the attack stemmed from a months-long operation targeting its wallet infrastructure. The breach began when an engineer inadvertently downloaded a compromised version of an AI coding tool, which allowed hackers to infiltrate the company's systems. A crucial turning point occurred when the same engineer participated in interviews for a fictitious job, leading to the installation of malicious code on his work computer that facilitated unauthorized access across the engineering team. This incident highlights the increasing threat of social engineering tactics combined with advanced technology in the cryptocurrency sector. The use of deceptive job interviews underscores the need for heightened security measures against phishing and similar attacks, particularly in tech-intensive environments. In response, Binance plans to engage third-party cybersecurity experts, enhance its AI-driven detection capabilities, and create a research fund aimed at improving AI security in blockchain systems, signaling a proactive approach to safeguarding digital assets in the evolving landscape of cyber threats.