Fake Job Interviews and Malicious AI Tools Behind Record $6.3 Billion Binance Heist
A shocking account has emerged of how fake job interviews and malicious AI tools were used in the theft of a record $6.3 billion from Binance, the world's largest cryptocurrency exchange platform.
According to a preliminary investigation report released by Binance on Tuesday, hackers carried out the massive cyberattack by employing carefully planned social engineering tactics to gain control of a developer's computer and the company's internal artificial intelligence (AI) systems.
How the Cyber Heist Was Carried Out
According to Binance's report, the unprecedented cyberattack began in June. At the time, an employee of Binance's wallet infrastructure engineering team downloaded a malicious or tampered AI coding tool. Although the issue was identified and the affected device was immediately isolated and access credentials were changed, sensitive information belonging to the wallet team had already been exposed to the hackers.
Later, in September, another software engineer from the same team was lured by the prospect of a new job and participated in an online interview with a fake company. After even holding a virtual video meeting with the fake company's Chief Executive Officer (CEO), the engineer placed complete trust in the organisation and downloaded a file onto his computer.
On October 20, hackers used the compromised computer and the company's internal AI tools to gain control of the central security system. On October 29, they exploited that covert access to launder a record amount of money.
Response and Future Security Measures
The US Federal Bureau of Investigation (FBI) has linked the attack to a North Korean state-sponsored hacking group, although North Korea has once again denied the allegations. Binance has formally expressed its deep regret to users and partners over the incident. In addition, as previously announced, the company has accelerated the process of fully reimbursing all affected customers using its own funds.
To prevent similar cyberattacks in the future, the crypto giant has decided to increase capital investment several times over in AI-based institutional security monitoring. At the same time, the company has already begun working on a dedicated cyber research fund and coordinated security initiatives in collaboration with leading AI companies worldwide.
//DBTech/BMT/OR//
