Binance has disclosed details of a major security breach resulting in the theft of $6.3 billion in cryptocurrency, marking the largest crypto hack to date. The company stated that the attack was orchestrated through a sophisticated, multi-stage campaign employing various techniques including malicious software and social engineering tactics.
According to Binance’s account, attackers targeted the firm’s engineers through deceptive methods. One engineer was initially contacted via a legitimate job-hunting platform and invited to participate in interviews with individuals posing as representatives of a fake company. The perpetrators employed advanced trust-building techniques, including sharing social media profiles with personal images. During a subsequent interview, the engineer was instructed to download what was presented as a work assignment but contained malicious code designed to evade detection through obfuscation techniques.
Once the engineer’s computer was compromised, attackers leveraged the breached system alongside a compromised internal AI tool in October to gain access to laptops belonging to two additional engineers. This access enabled them to execute subsequent phases of the attack and ultimately drain billions of dollars in cryptocurrency from the exchange’s wallets. The breach forced Binance to suspend customer withdrawals globally until the service was restored on Sunday, after which customers withdrew billions in assets.
Binance stated it has undertaken several remedial measures, including coordination with law enforcement agencies to trace and freeze stolen assets. The company indicated it had set aside more than 100 percent of the losses and restored 98 percent of affected token assets as of Saturday. US law enforcement agencies, including the FBI and Secret Service, have been assisting in the investigation. Analysts and investigators have suggested North Korean involvement, though Pyongyang has denied responsibility. Binance subsequently confirmed on Tuesday that FBI information indicates North Korean involvement in the incident. Going forward, the exchange said it plans to increase investment in AI-based threat detection, engage third-party cybersecurity experts for a comprehensive review, establish a security research fund, and collaborate with leading AI and security firms on targeted initiatives.
Article Attribution | Read More at Article Source
Article summary produced by Claude AI