Hackers exploit fake job interviews and AI tools in $6.3bn Binance crypto heist

Published:

Hackers exploited fake job interviews and a compromised internal AI tool to steal $6.3 billion from Binance, the world’s largest cryptocurrency exchange. The company disclosed these findings as part of an investigation into what it described as a “serious and highly sophisticated security incident.”

According to Binance, the attackers employed a multi-stage campaign that included social engineering tactics to target its engineers. One engineer was lured into a fake job interview through a legitimate job-hunting platform, where he was instructed to download malware disguised as an assignment. This malware utilized obfuscation techniques to evade detection, ultimately compromising the engineer’s computer.

Once inside the system, the hackers leveraged the compromised machine and an internal AI tool to gain access to the laptops of two other engineers. This breach enabled them to execute subsequent steps of the attack, which culminated in the draining of billions of dollars worth of cryptocurrency from Binance’s wallets.

In response to the incident, Binance temporarily suspended withdrawals, preventing users from accessing their funds until the service was restored. Following the reopening, customers withdrew billions in assets, prompting Binance to apologize for the disruption and uncertainty caused by the breach. The company has since taken measures to work with law enforcement to trace and freeze the stolen assets.

Binance reported that it has set aside more than 100% of the funds needed to cover the loss, with 98% of the affected token assets replenished as of the latest update. This incident marks one of the largest crypto hacks to date, raising significant concerns about the security measures in place within the cryptocurrency industry.

As the investigation continues, Binance’s experience underscores the growing sophistication of cyber threats, particularly those leveraging social engineering and AI tools. The company has committed to enhancing its security protocols to prevent similar incidents in the future.

For further details, refer to BBC News.

For more insights into technology developments, visit our technology section.

Share post:

Subscribe

Popular

More like this
Related

Saudi Aramco acquires 49% stake in HUMAIN for $2.6 billion to enhance AI capabilities

Saudi Aramco has acquired a 49% stake in HUMAIN for $2.6 billion, a move aimed at enhancing the artificial intelligence capabilities of the Saudi energy giant. This transaction, completed in collaboration with the Public Investment Fund (PIF), is expected to…

UiPath calls on Gulf enterprises to focus on measurable AI outcomes for success

UiPath is urging Gulf enterprises to shift their focus from AI experimentation to achieving measurable business outcomes, emphasizing the importance of governance and workforce skills. During the UiPath FUSION event in Dubai, Karl Crowther, Vice President for the Middle East,…

Jackery unveils Explorer 100D, its smallest portable power station with LFP batteries

Jackery has introduced the Explorer 100D, its smallest portable power station to date, featuring lithium iron phosphate (LFP) batteries. Measuring just 4.6 by 3.4 by 3.4 inches and weighing 1.87 pounds, the Explorer 100D is designed for portability, making it…

Teachers adapt classroom strategies to counter reliance on AI tools like ChatGPT

As educators grapple with the implications of AI tools like ChatGPT, teachers across the United States are adapting their classroom strategies to mitigate reliance on these technologies. Tristen Chang, a sixth-grade humanities teacher in San Francisco, has eliminated take-home essays…