North Korean cryptocurrency thieves tricked a Binance software engineer into downloading malware onto their work-issued computer during a fake job interview process before last week’s record-breaking $6.3 billion heist.
In an incident report published on Tuesday, the cryptocurrency exchange said several techniques - including social engineering via fake job interviews, malware downloads, compromised internal AI tooling, endpoint takeover, and an “advanced transaction-authorization method” - led to the October 29 security breach.
“Our current investigation indicates that this was a sophisticated, multi-stage campaign,” the incident report said. “It was not a single isolated breach or a simple phishing incident.”
Over the weekend, the FBI attributed the theft to TraderTraitor, a North Korean hacking operation linked to Lazarus Group, known for combining espionage with massive cryptocurrency heists. The Pyongyang-backed crew is also highly adept at job market scams - both posing as IT workers, who are then hired by Western companies, and as potential employers to lure software engineers into downloading malware and infecting corporate devices.
It appears the Binance hack was a social engineering stunt. Can’t say I’m surprised. Often the biggest weaknesses in any system is the people running it.
Still, who the heck takes a job interview call on their office laptop??
I assumed they were doing the interview and sent the employee an updated cv or similar, but I was wrong
The Pyongyang-backed crew is also highly adept at job market scams - both posing as IT workers, who are then hired by Western companies, and as potential employers to lure software engineers into downloading malware and infecting corporate devices.
Fr, why use your current work laptop?
Wtf, Everyone
I work in HR. I am getting emails DAILY from data thieves pretending to be an actual employee asking I change their direct deposit account. Luckily I have access to each employee’s personal email info, so if what I get isn’t from their personal email I ignore it.
Stay vigilant out there. Well done.
On the bright side they were already looking for a new job. Since they definitely don’t have that old one anymore lol.
Just deserts
North Korea has lots of tundra but I don’t think they have any deserts.
Tundras are generally deserts. One of those oddities of word definitions.
North Korea do so many scams and cyber thefts mostly aimed at America.
At least nothing of any real value was lost. Bitcoins are not really better than NFT, and those are worthless today. It’s just that bitcoin can be used for illegal activities, otherwise they have no use, but that’s apparently enough for some people to still believe they are worth something.
Some use crypto for illegal activities yes, but some just like their privacy, and it’s good that we have a means for people to continue to maintain their privacy in their financial dealings. Especially now that Donald has normalized the surveillance state to a formerly unimaginable degree.
And besides, the fees for transferring crypto internationally are significantly lower than transacting internationally through a bank, so saying there’s not utility for it isn’t exactly true.
Bitcoin does not protect privacy, that was a claim when it was new, but has been thoroughly debunked. Bitcoins are as traceable as any other digital payment.
Using it illegally is reserved for people or nations that are out of reach of the law.
