Hackers exploit fake job interviews and AI tools in $6.3bn Binance crypto heist

Published:

Hackers exploited fake job interviews and a compromised internal AI tool to steal $6.3 billion from Binance, the world’s largest cryptocurrency exchange. The company disclosed these findings as part of an investigation into what it described as a “serious and highly sophisticated security incident.”

According to Binance, the attackers employed a multi-stage campaign that included social engineering tactics to target its engineers. One engineer was lured into a fake job interview through a legitimate job-hunting platform, where he was instructed to download malware disguised as an assignment. This malware utilized obfuscation techniques to evade detection, ultimately compromising the engineer’s computer.

Once inside the system, the hackers leveraged the compromised machine and an internal AI tool to gain access to the laptops of two other engineers. This breach enabled them to execute subsequent steps of the attack, which culminated in the draining of billions of dollars worth of cryptocurrency from Binance’s wallets.

In response to the incident, Binance temporarily suspended withdrawals, preventing users from accessing their funds until the service was restored. Following the reopening, customers withdrew billions in assets, prompting Binance to apologize for the disruption and uncertainty caused by the breach. The company has since taken measures to work with law enforcement to trace and freeze the stolen assets.

Binance reported that it has set aside more than 100% of the funds needed to cover the loss, with 98% of the affected token assets replenished as of the latest update. This incident marks one of the largest crypto hacks to date, raising significant concerns about the security measures in place within the cryptocurrency industry.

As the investigation continues, Binance’s experience underscores the growing sophistication of cyber threats, particularly those leveraging social engineering and AI tools. The company has committed to enhancing its security protocols to prevent similar incidents in the future.

For further details, refer to BBC News.

For more insights into technology developments, visit our technology section.

Share post:

Subscribe

Popular

More like this
Related

Nothing announces launch of first screen-free AI device for December

Nothing Technology, led by CEO Carl Pei, has announced plans to launch its first AI device in December, marking a significant step in the company's shift towards AI-native products. This announcement comes just over a year after Pei revealed intentions…

Apple launches its first touchscreen MacBook Pro, starting at $2,899

Apple has officially entered the touchscreen laptop market with the launch of its first touchscreen MacBook Pro, unveiled by CEO John Ternus during an event in Los Angeles. This marks a significant shift for the company, which has historically resisted…

Saudi Aramco acquires 49% stake in HUMAIN for $2.6 billion to enhance AI capabilities

Saudi Aramco has acquired a 49% stake in HUMAIN for $2.6 billion, a move aimed at enhancing the artificial intelligence capabilities of the Saudi energy giant. This transaction, completed in collaboration with the Public Investment Fund (PIF), is expected to…

UiPath calls on Gulf enterprises to focus on measurable AI outcomes for success

UiPath is urging Gulf enterprises to shift their focus from AI experimentation to achieving measurable business outcomes, emphasizing the importance of governance and workforce skills. During the UiPath FUSION event in Dubai, Karl Crowther, Vice President for the Middle East,…