Binance says hackers spent months preparing for $6.3 billion theft
Binance's preliminary report on the attack shows that hackers began preparing in June of this year, subsequently using fake interviews to lure a Binance employee, planting tampered software on their computer, and then using artificial intelligence tools to infiltrate the wallet system.
TL;DR
- Hackers spent months preparing for the $6.3 billion Binance theft, starting in June.
- The attack involved a fake job interview to lure an employee and plant malware.
- Internal AI tools were used to compromise the computers of two Binance wallet team engineers.
- The hackers gained access to a transaction signing service and drained the exchange's hot wallet.
- North Korean hacker group Lazarus (TraderTraitor) is accused of the attack, though North Korea denies it.
- The sophistication of the social engineering tactics used by the hackers was noted as advanced and deceptive.
- Approximately $2.85 billion has been frozen or intercepted, and Binance will compensate customers.
- Binance is rebuilding systems, bringing in external security firms, and establishing a security research fund.