Binance says hackers used fake job interview to compromise computer before $6.3 billion attack
Binance said Tuesday hackers used a bogus job interview to compromise a computer and an internal artificial intelligence tool to gain control over the company’s wallets before draining $6.3 billion worth of crypto, in what could be the largest-ever financial heist.
In an initial report into what went wrong, the world’s largest crypto exchange detailed a sophisticated hacking endeavor that began with an advertisement for a tampered version of a coding tool in June and set in chain a series of security breaches that culminated in the theft of the crypto on Oct. 29.
The FBI has blamed a North Korean hacking group, a claim North Korea has rejected. Binance has said it is repaying all customers who have lost funds through the hack.
Binance said that the attack started when an employee from its wallet developer team in June downloaded an AI tool that had been tampered with. The crypto exchange detected this, replaced the device and changed credentials, but the employee’s role and that of others on the wallet team were exposed to the hacker.
Then in September a second software engineer seeking a new job downloaded “malicious code repository” onto his computer after interviewing for what the person thought was a legitimate role, including meeting virtually with the CEO of a fictitious company.
On Oct. 20, the attacker used the compromised computer plus an internal AI tool to gain control of the wallet developer’s system and that of a second wallet developer on that team.
FOR SUBSCRIBERSElon Musk moved to Texas to escape Democrats — now they’re in charge
FOR SUBSCRIBERSWhat Democrats plan to do with House majority: Investigate Trump and tackle affordability
FOR SUBSCRIBERSVance tiptoes out on his own after a midterm wipeout for Republicans
FOR SUBSCRIBERSData centers rejected by voters across the country — challenging the AI boom
FOR SUBSCRIBERSRepublicans bet the House on redistricting, but Democrats swept through the seats they targeted
FOR SUBSCRIBERSDemocratic Senate set to thwart Trump’s Supreme Court and judicial appointments
FOR SUBSCRIBERSIran says Americans rejected Trump’s war as the world reacts to the midterms rout
FOR SUBSCRIBERSVoters rejected Trump’s ‘booming’ economy narrative and the AI that underpins it
FOR SUBSCRIBERS‘No one is going to outwork Hakeem’: Jeffries’ rise to the cusp of history has been rapid
FOR SUBSCRIBERSAI chatbots cited dozens of spoofed campaign websites before midterm elections, researchers say
FOR SUBSCRIBERSWhy Devin Booker is unlike almost any superstar in the NBA
FOR SUBSCRIBERSThe Data Dive: Steve Kornacki charts where Democrats sliced into GOP strongholds
FOR SUBSCRIBERSElection takeaways: The Trump coalition implodes. What comes next?
FOR SUBSCRIBERS‘Everything is going to change’: Republicans begin grappling with how they lost so badly
FOR SUBSCRIBERSThe battlegrounds our journalists are reporting from
Slide 1 of 1
On Oct. 29 the attacker used the second wallet developer’s computer, using stolen credentials from the first wallet developer, and triggered a malicious script to launch the attack.
FOR SUBSCRIBERSElon Musk moved to Texas to escape Democrats — now they’re in charge
FOR SUBSCRIBERSWhat Democrats plan to do with House majority: Investigate Trump and tackle affordability
FOR SUBSCRIBERSVance tiptoes out on his own after a midterm wipeout for Republicans
FOR SUBSCRIBERSData centers rejected by voters across the country — challenging the AI boom
FOR SUBSCRIBERSRepublicans bet the House on redistricting, but Democrats swept through the seats they targeted
FOR SUBSCRIBERSDemocratic Senate set to thwart Trump’s Supreme Court and judicial appointments
FOR SUBSCRIBERSIran says Americans rejected Trump’s war as the world reacts to the midterms rout
FOR SUBSCRIBERSVoters rejected Trump’s ‘booming’ economy narrative and the AI that underpins it
FOR SUBSCRIBERS‘No one is going to outwork Hakeem’: Jeffries’ rise to the cusp of history has been rapid
FOR SUBSCRIBERSAI chatbots cited dozens of spoofed campaign websites before midterm elections, researchers say
FOR SUBSCRIBERSWhy Devin Booker is unlike almost any superstar in the NBA
FOR SUBSCRIBERSThe Data Dive: Steve Kornacki charts where Democrats sliced into GOP strongholds
FOR SUBSCRIBERSElection takeaways: The Trump coalition implodes. What comes next?
FOR SUBSCRIBERS‘Everything is going to change’: Republicans begin grappling with how they lost so badly
FOR SUBSCRIBERSThe battlegrounds our journalists are reporting from
Slide 1 of 1
“This should not have happened, and we apologise for the concern, disruption and uncertainty it caused our users, partners and the wider industry,” Binance said in the report.
As a result of the hack, Binance is increasing investments in AI-enabled detection and is working on establishing a security research fund and targeted initiatives with leading AI companies.
This post appeared first on https://www.nbcnews.com
