Binance CSO unwittingly foreshadowed $6.3B hack tactic months before attack
Summary
Binance’s chief security officer had warned months before the exchange’s October hack that fake job interviews could trick employees into running malicious coding tests, compromising devices and exposing credentials. Binance’s preliminary investigation said a software engineer downloaded such an assignment in September; its setup ran malware that evaded endpoint security and formed part of the attack. Binance said it had run monthly phishing simulations and later tightened device and access controls, rebuilt affected systems, revoked compromised credentials, and brought in outside security experts. The exchange also reported blocking 57 suspected North Korea-linked threats so far this year.
