# North Korean hackers stole $6.3bn in crypto after malware-laced coding test

- URL: https://talkfuse.com/story/north-korean-fake-job-interview-led-to-6-3b-binance-heist/
- Published: 2026-11-03T22:04:45+00:00
- Updated: 2026-11-03T22:20:35+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/security/2026/11/03/north-korean-fake-job-interview-led-to-63b-binance-heist/5307398
- Topics: Asia, Cybersecurity, Technology, World

## Key points

- Binance reports a $6.3 billion cryptocurrency theft.
- Hackers used a fake interview and malware to access engineers’ devices.
- The exchange says it rebuilt affected systems and replaced devices.

## Summary

Binance says North Korean hackers used a fake job interview to trick one of its software engineers into installing malware, helping them carry out a $6.3 billion cryptocurrency theft on 29 October. The exchange describes the incident as a sophisticated, multi-stage campaign rather than a single breach or simple phishing attack.

Binance’s account says preparations began in June, when a malicious Homebrew installation exposed an engineer’s role and colleagues despite the malware being detected and credentials reset. In September, another engineer was approached on a job-hunting platform, interviewed by people posing as company staff, then sent a malware-infected coding assignment. The attackers later used an internal AI tool and stolen access credentials to reach wallet developers’ computers and launch the theft; Binance says it has rebuilt the affected wallet system and AI tool and replaced compromised devices.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.