Fake recruitment and artificial intelligence. This is how hackers carried out the largest cyber attack in history

In the document, the cryptocurrency exchange described in detail a sophisticated hacking operation, which culminated in the withdrawal of cryptocurrencies worth $6.3 billion on October 29, which is believed to be the largest theft in history.

Origin of the attack

Binance said the attack began when an employee of its wallet development team downloaded a fake artificial intelligence tool in June. The cryptocurrency exchange detected this, replaced the tool and changed the credentials, but the hackers were able to see the login credentials of this employee and other members of the wallet team.

Another programmer who was looking for a new job downloaded a "repository of malicious code" to his computer in September after interviewing for a position he believed was legitimate after a virtual meeting with the CEO of a fictitious company.

On October 20, the attacker used an infected computer and an internal artificial intelligence tool to take control of the system of a wallet developer and a second developer on that team.

On October 29, the attacker exploited the second developer's computer using the first developer's stolen credentials and ran a malicious script to carry out the attack.

North Korean hackers are blamed for the attack

The FBI accused a North Korean hacking group of carrying out the cyberattack, but North Korea rejected the allegations.

Binance said it would refund all customers who lost funds due to the attack.