North Korean fake job interview led to $6.3B Binance heist
Binance disclosed that the record-breaking October 29 heist involved a sophisticated multi-stage campaign by North Korean threat actors linked to Lazarus Group. The attack began with a supply-chain compromise in June when an engineer downloaded malicious Homebrew software, followed by social engineering via fake job interviews targeting another engineer in September to install malware on corporate systems. The attackers also exploited compromised internal AI tooling and advanced transaction authorization methods to complete the theft.
Key points
- Coordinated attack over months combining supply-chain and social engineering tactics
- Fake job interview process used to distribute malware to engineer
- Exploited internal AI tools and authorization systems for transaction access
- Attributed to North Korean Lazarus Group via FBI
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Register did the reporting; read the original for the full story.
Read the full story at The Register
