Binance Reveals How Hackers Stole $6 Billion

Binance has made public how hackers employed fake job interviews, infected software, and an internal AI tool to carry out a $6.34 billion cryptocurrency theft.

Key points

• The exchange published its investigation findings, tracing the October 29 cyber-attack to a campaign that began months earlier.
• Approximately $2.85 billion of the stolen funds has been frozen, preventing the attackers from spending or converting those assets.
• Binance remarked it had replaced 98% of the affected assets using its own funds.
• On October 20, the attackers applied their existing access and an internal AI tool to compromise software employed by two extra engineers.
• In September, the attackers contacted a different Binance engineer through a legitimate recruitment platform.

Meanwhile, the exchange published its investigation findings, tracing the October 29 cyber-attack to a campaign that began months earlier. Binance Customers Pull Almost $5 Billion Within Hours of Reopening.

Binance remarked it had replaced 98% of the affected assets using its own funds. The remaining assets involve less frequently traded cryptocurrencies that are harder to purchase.

Meanwhile, approximately $2.85 billion of the stolen funds has been frozen, preventing the attackers from spending or converting those assets.

In practice, the theft unfolded over roughly four hours on October 29. The US Federal Bureau of Investigation attributed the attack to hackers affiliated with North Korea.

Pyongyang rejected the accusation. Kim Jong Un's sister dismissed it as "absurd rhetoric."

Binance ranks as the world's largest cryptocurrency exchange by daily trading volume. News of the breach, believed to be the largest crypto heist on record, triggered sharp declines throughout most major cryptocurrencies.

According to Binance's findings, the attackers began laying the groundwork in June. They persuaded an engineer to download a compromised version of Homebrew, a widely applied software package manager.

Meanwhile, the exchange's cybersecurity team detected and removed the malware. Nevertheless, the attackers had already gathered information concerning the employee and colleagues. That initial intrusion preceded a second approach targeting another engineer. US Blames North Korea for History's Worst Crypto Hack.

In September, the attackers contacted a different Binance engineer through a legitimate recruitment platform. They offered an interview for a role at a firm that did not exist.

To appear credible, they shared social media photographs and videos. After building trust, they asked the engineer to download a technical assignment as part of the interview.

For context, the assignment contained malware designed to conceal its activity and evade detection. It additionally replaced a genuine development-tool component with a malicious version.

Binance remarked this infection provided the attackers a crucial connection to its internal systems.

On October 20, the attackers applied their existing access and an internal AI tool to compromise software employed by two extra engineers. Nine days afterwards, they activated malicious code and rolled out the theft. Stay Connected with ProPakistani. Obtain the latest international news and global stories wherever you prefer. Follow on Google Discover. Follow on Google News Join WhatsApp. See more ProPakistani stories in Google Search and Top Stories.

In short, binance Reveals How Hackers Stole $6 Billion is the central thread here, and readers can expect follow-up reporting as the picture becomes clearer.