Binance security chief once warned about fake interview code attack tactics, months later a $6.3 billion theft occurred

Odaily report: Binance Chief Security Officer Jimmy Su said in a July interview that fake job interviews could trick employees into running malicious code on company devices, thereby leading to devices being compromised, credentials being stolen, and used to infiltrate internal networks. In September, a Binance software engineer downloaded a malicious programming assignment to a work computer during a fake interview; Binance's preliminary investigation said the incident became part of the multi-stage attack behind the October theft.

Jimmy Su also pointed out that attackers may use seemingly normal technical assessment steps to bypass antivirus tools. Binance's subsequent investigation said the installer for the malicious assignment evaded endpoint security tools through obfuscation and other evasion techniques.

Binance said that so far this year it has blocked 57 suspected North Korea-related cyber threats, about one every five days. After the October attack, Binance said it has strengthened device and access controls, rebuilt the affected wallet systems and internal AI tools, and increased investment in endpoint protection and development environment security. (Cointelegraph)