Binance Hack Linked to Fake Interview Malware Download

• •A $6.3 billion theft at Binance is linked to malware downloaded during a fake job interview.
• •The attack involved a multistage process with significant dwell time, allowing for credential harvesting.
• •Binance has not released detailed technical information about the malware or affected systems.

Binance's security chief confirmed that a $6.3 billion theft in October was linked to a multistage attack that began in September. An engineer downloaded malicious code during a fake job interview, which compromised their device and allowed attackers to harvest credentials. This attack method, involving fake coding assessments, was previously warned about by Binance's CSO in a July interview. The malicious code remained undetected for weeks, allowing attackers to establish persistence before executing the theft. Binance has not disclosed specific technical details about the malware or the systems affected, leaving security researchers without key indicators of compromise. The exchange aims to warn other firms in the crypto industry about the potential for similar attacks.