World news and discussion on TalkFuse.
Binance details months-long North Korean cyber attack that stole $6.34bn
Developed over time first seen 1 day ago
Binance said attackers spent months preparing the cyber attack that affected $6.34 billion in digital assets, using a tampered developer tool and a fake job interview to compromise employees’ computers. The exchange’s account linked the incident to the FBI’s finding that North Korea was responsible for the theft on 29 October.
In June, a wallet engineer downloaded a modified installation of an AI coding tool; in September, another engineer installed malware disguised as a job assignment. Binance said attackers later used the compromised devices and an internal AI tool to reach wallet systems and trigger the theft. Of the assets affected, $2.85 billion had been frozen; Binance said it had replenished 98 per cent of affected tokens and would cover the losses.
- Sources
- 3
- Outlets
- 3
- Left · Centre · Right
- 0 · 1 · 0
In short
- Binance says the attack took months to prepare.
- The FBI attributed the theft to North Korea.
- Binance says it will cover the losses.
How this story developed
- 12 hours ago Binance’s fuller account traced the intrusion to a modified coding tool downloaded in June and interview malware installed in September, and said the compromised devices helped attackers reach wallet systems; the exchange reiterated that it would cover losses and had replenished 98 per cent of affected tokens.
- 18 hours ago Binance’s initial investigation added that a software engineer downloaded malicious code from a job assignment, which attackers used with an internal AI tool to reach wallet engineers and obtain a deployment token; the FBI blamed North Korean group TraderTraitor, which Pyongyang denied, while Binance said its response and independent review were ongoing.
- 19 hours ago Binance linked a $6.34 billion digital asset theft on 29 October to North Korean attackers, saying they compromised employees’ computers through a tampered AI coding tool and a fake job interview, and that it had replenished 98 per cent of affected tokens and frozen $2.85 billion.
Explained simply
Binance is a major cryptocurrency exchange, where people buy, sell and store digital assets such as bitcoin. Its wallet systems hold or manage those assets, making access to them a valuable target for cyber criminals.
North Korea has been linked by governments and investigators to cyber operations that steal money, including cryptocurrency. Such thefts can involve compromising employees’ devices or accounts to gain access to systems used to manage digital assets.
A large theft can affect customers, the exchange and confidence in the wider cryptocurrency market. Stolen assets may be difficult to recover, though exchanges and other services can sometimes freeze them if they can identify where they are being sent.
Coverage · 3 sources
Asia Business Crypto Cybersecurity Elections Politics Software Technology World
Read the full article at the source →
Originally published by The Hill as “Binance says malicious code, fake job interview led to $6.3B hack”.