币安披露黑客利用AI工具与虚假面试盗取超60亿美元资产

1. 14:07
   Solidot · AI 筛选Selected

   Binance Discloses Hackers Breached Engineer's Computer via Fake Job Interview to Steal Assets

   Binance published a preliminary investigation report on its official blog detailing how hackers stole $6.3 billion worth of cryptocurrency through supply chain attacks, fake job interviews, and other methods. The attack began in June when an engineer downloaded a tampered installer that leaked team information. In September, attackers conducted a video interview representing a fictitious company, tricking the engineer into running a repository containing malicious code on their work computer. By October, the attackers used an internal AI tool as a springboard for lateral movement across multiple devices, stealing container deployment authorization tokens and executing scripts to compromise wallet-signing operations.

2. 06:41
   IT之家 · AI 筛选Selected

   Binance reveals details of $6.36 billion crypto theft: Hackers breached hot wallets via fake job offers and AI tools

   Binance published an investigative report detailing the theft of approximately $6.36 billion in cryptocurrency. Hackers infiltrated the hot wallet authorization system by combining social engineering via fake job recruitment, supply chain tampering of AI coding tools, and lateral movement using internal AI tools. The attackers leveraged the EIP-7702 delegation mechanism to transfer assets. As of November 3, Binance has frozen or intercepted approximately $2.85 billion in assets, replenished 98% of the affected funds, and announced plans to increase investment in AI security and endpoint protection.

3. 06:04
   The Verge · AI 筛选Selected

   Binance Says Hackers Stole $6.3 Billion Using Fake Job Interviews and Internal AI Tools

   In a post-mortem report, Binance revealed that hackers orchestrated a $6.3 billion cryptocurrency theft by combining fake job interviews with the company's internal AI tools. Posing as recruiters, the attackers tricked engineers into downloading backdoor-laden interview assignments to gain initial access, subsequently leveraging Binance's internal AI tools to compromise the affected employees' wallets. Binance stated that it has frozen or intercepted roughly $2.85 billion in assets, with 98% of the affected tokens replenished and withdrawals resumed; however, the report did not provide specific details on how the internal AI tools operated.

4. 01:44
   Hacker News · AISelected

   Binance reveals hackers stole $6.34B in assets using fake interviews and compromised internal AI tools

   Binance has disclosed that hackers breached its wallet infrastructure using fake job interviews, malicious code, and compromised internal AI tools, resulting in the theft of $6.34 billion in crypto assets on October 29. The attack began when an engineer downloaded a tampered AI coding tool that leaked team credentials. The hackers then posed as recruiters, planting a trojan during an interview coding test, and ultimately used internal AI tools to move laterally and gain access to the wallet transaction authorization system. Binance stated it has used its reserves to cover 98% of the affected assets and partnered with industry peers to freeze approximately $3 billion in funds.

Current heat 31·Comparable peak 31（Nov 4 16:00）·Comparable change, last 24 hours–

Trends compare only the same parties observed continuously, so the scope can be narrower than current heat counts. Move the pointer or tap the chart to see hourly heat; use the left and right arrow keys on a keyboard.