Binance Discloses Hackers Breached Engineer's Computer via Fake Job Interview to Steal Assets

Binance published a preliminary investigation report on its official blog detailing how hackers stole $6.3 billion worth of cryptocurrency through supply chain attacks, fake job interviews, and other methods. The attack began in June when an engineer downloaded a tampered installer that leaked team information. In September, attackers conducted a video interview representing a fictitious company, tricking the engineer into running a repository containing malicious code on their work computer. By October, the attackers used an internal AI tool as a springboard for lateral movement across multiple devices, stealing container deployment authorization tokens and executing scripts to compromise wallet-signing operations.