Binance says hackers used fake job interviews and its own internal AI tool to take $6.3 billion in crypto

The Verge reports that Binance's postmortem traces the theft to a tampered installer spread by a malicious Google ad in June, then to a September approach in which someone posing as an employer ran several rounds of interviews, shared social media pages to build trust and sent a fake interview assignment that was really malware. The FBI has identified the group as a North Korean unit called TraderTraitor. By 20 October the attackers had used Binance's internal AI tool to gain control over wallets for two employees.

• If a recruiter asks you to download or run code as part of an interview, do it only in a separate machine or virtual machine with nothing else on it, or decline.
• Check who is really behind a job approach through the company's own careers page before you share files, and be wary of ads on search results that offer software downloads.

Source: The Verge. This is our short summary of their reporting. The paragraphs marked "Our read" and the things to do are SeedFoundry's opinion. The summary is drafted with AI tools. Image: Binance, from its own announcement. How we source and credit