Billionaire robbery from crypto exchange: Hackers faked job interview for Binance Coup

The attack on Binance shows how perfidious hackers now operate. A supposed job offer and manipulated software have become a trap for the crypto platform. The attackers apparently acted with great patience.

According to initial findings from the crypto trading platform Binance, a manipulated AI tool and a fake job interview have opened the door for hackers to steal billions. The cyberattack, in which hackers withdrew $6.3 billion in cryptocurrencies from Binance's IT systems last week, began in June, the company said in an analysis of the events. The US Federal Police FBI and private analysis firms have blamed state-controlled hackers from North Korea for the attack.

An employee from the Binance digital wallet development team downloaded an AI tool in June, the crypto exchange said. Binance recognized this and changed the passwords, but the hackers revealed the identity of the employee and several of his colleagues. In September, a second software developer looking for a new job downloaded "malicious code databases" onto his computer while conducting a virtual interview with the CEO of a fictitious company.

On October 20, the hackers took control of the IT system of the wallet developer and one of his colleagues via his computer and an AI tool, the investigative report said. Nine days later, they used the latter's computer and stolen passwords from the former to plant a malicious script that carried out the attack. "This should not have happened, and we apologize for the concern, disruption and uncertainty this has caused to our users, partners and the entire industry," Binance said.

After the cyber attack, investors turned their backs on Binance in droves. According to the company, customers initially withdrew $4.6 billion, but around $1 billion has since been returned. According to experts, institutional investors in the crypto market could act more hesitantly and slow down the hoped-for inflow of capital into the market.