Hackers Leveraged Fake Job Interviews, Binance Says

Cybercriminals are finding new ways to exploit trust in the workplace, and a recent attack on cryptocurrency exchange Binance shows just how damaging these tactics can become. The company says criminals used a fake recruitment exercise to gain access to an employee’s computer before expanding their reach into its internal systems. The incident resulted in the theft of an estimated $6.3 billion in digital assets.

Following the breach, Binance temporarily restricted cryptocurrency withdrawals across its global platform. This left customers unable to move their funds while the company worked to contain the incident. Although withdrawal services were later restored on Sunday, users moved billions of dollars’ worth of assets away from the exchange after access returned.

According to Binance’s investigation, the attackers did not begin by directly targeting the exchange’s main systems. Instead, they approached an engineer through a legitimate employment website and presented themselves as potential recruiters. They arranged interviews and used convincing online profiles, including accounts containing personal photographs, to make their identities appear genuine.

The deception continued when the engineer was asked to complete a technical task as part of the selection process. The file provided for this exercise contained malicious software. Once downloaded, the program infected the employee’s computer. Binance said the attackers had designed the malware to conceal its activities and make it harder for security systems to recognize.

Gaining control of one employee’s device gave the criminals an opportunity to reach other parts of the organization. Binance reported that the attackers subsequently misused an internal artificial intelligence tool to compromise the laptops of two additional engineers. They then gained access to systems and tools that enabled them to carry out the cryptocurrency theft.

Investigators are also examining possible links between the incident and North Korea. The FBI and U.S. Secret Service have been helping Binance follow the movement of the stolen assets. U.S. authorities identified similarities with previous cyber operations associated with North Korean hackers. Binance later referred to FBI findings that attributed the attack to North Korea. However, the country has rejected the allegations.

In response, Binance says it has committed more than enough funds to cover the reported losses. The exchange also stated that 98% of the affected token assets had been replenished by Saturday. Its recovery efforts include cooperating with law enforcement agencies to trace and freeze assets linked to the incident.

The company is also planning changes to its security strategy. These include greater spending on artificial intelligence tools for identifying threats, an independent review by cybersecurity specialists and the creation of a fund to support security research.

The rate at which crypto companies are being targeted by cybercriminals is rising, and companies like Riot Blockchain Inc. (NASDAQ: RIOT) could find themselves investing more and more resources to bolster their cybersecurity systems.

About BillionDollarClub

BillionDollarClub (“BDC”) is a specialized communications platform with a focus on the biggest and brightest companies covered by IBN. It is one of 75+ brands within the Dynamic Brand Portfolio @ IBN that delivers: (1) access to a vast network of wire solutions via InvestorWire to efficiently and effectively reach a myriad of target markets, demographics and diverse industries; (2) article and editorial syndication to 5,000+ outlets; (3) enhanced press release enhancement to ensure maximum impact; (4) social media distribution via IBN to millions of social media followers; and (5) a full array of tailored corporate communications solutions. With broad reach and a seasoned team of contributing journalists and writers, BDC is uniquely positioned to best serve private and public companies that want to reach a wide audience of investors, influencers, consumers, journalists, and the general public. By cutting through the overload of information in today’s market, BDC brings its clients unparalleled recognition and brand awareness.

BDC is where breaking news, insightful content and actionable information converge.

To receive SMS alerts from BillionDollarClub, text “Billion” to 888-902-4192 (U.S. Mobile Phones Only)

For more information, please visit https://www.BillionDollarClub.com

Please see full terms of use and disclaimers on the BillionDollarClub website applicable to all content provided by BDC, wherever published or re-published: https://www.BillionDollarClub.com/Disclaimer

BillionDollarClub
Los Angeles, CA
www.BillionDollarClub.com
310.299.1717 Office
Editor@BillionDollarClub.com

BillionDollarClub is powered by IBN