North Korean Hackers Breach Binance and Steal $6.3 Billion via Fake Job Interviews
朝鲜假招聘面试导致币安63亿美元遭盗窃
Binance published a security incident report confirming it suffered a sophisticated, multi-stage attack by North Korean threat group TraderTraitor, leading to the theft of $6.3 billion in cryptocurrency. Attackers tricked an engineer during a fake job interview into downloading test code containing malware, replacing local pyenv development tools to bypass endpoint detection. The attackers then used the compromised workstation and internal AI tools to move laterally into dev terminals used by the core wallet team and deploy malicious containers.
The original article reconstructs the complete attack chain—combining fake interviews, malicious dependency tampering, and internal AI tools for lateral movement—offering concrete insights for organizations defending against complex social engineering attacks.
Source:Buzzing HN · 中文精选 · theregister.com