Skip to main content
See every side of every news story
Published • loading... • Updated

Binance says hackers used fake job interview to compromise computer before $6.3 billion attack

Binance said hackers used fake interviews, malware and an internal AI tool to reach wallet systems, while $2.85 billion was frozen, the exchange said.

  • On Tuesday, Binance released an investigation into the $6.3 billion hack, revealing North Korean state-sponsored hackers used fake job interviews and malicious code to steal customer funds last week.
  • Hackers posed as recruiters to contact a Binance engineer in September, using a fake job recruitment process to build trust before instructing the employee to download an "assignment" containing malicious code.
  • That foothold allowed attackers to access internal tools and compromise three engineers, enabling the theft of $6.3 billion in 20 minutes; the US Federal Bureau of Investigation attributed the breach to North Korea's TraderTraitor unit.
  • In response to the theft, Binance replenished 98 per cent of affected assets using its own funds and froze $2.85 billion of the stolen crypto, while apologizing for the "concern, disruption and uncertainty" caused.
  • North Korea's cyber operations fund weapons programs, with experts estimating stolen money finances "40% of the weapons of mass destruction programmes"; Binance reported facing at least 57 suspected attacks from the group.
Insights by Ground AI
Podcasts & Opinions

171 Articles

Lean Right

First analysis results of the billion-dollar robbery at Binance show that the hacker attack started already in June. An AI tool also played a role in this.

·Düsseldorf, Germany
Read Full Article
Lean Right

It has been revealed that North Korean hackers offered fake job interviews to employees of the cryptocurrency exchange Binance and planted malware on their work computers. Binance stated that the hackers had been preparing attacks targeting multiple employees for approximately five months, starting last June. According to an initial investigation report released by Binance on the 3rd (local time), the attacks began last June. The hackers targete…

Think freely.Subscribe and get full access to Ground NewsSubscriptions start at $9.99/yearSubscribe

Bias Distribution

  • 37% of the sources lean Right
37% Right

Factuality Info Icon

To view factuality data please Upgrade to Premium

Ownership

Info Icon

To view ownership data please Upgrade to Vantage

Tennessee Star broke the news in Nashville, United States on Tuesday, November 3, 2026.
Too Big Arrow Icon
Sources are mostly out of (0)

Similar News Topics

News
Feed Dots Icon
For You
Search Icon
Search
Blindspot LogoBlindspotLocal