Binance says fake interviews helped enable $6.3 billion hack

Binance said a sophisticated campaign began when employees were targeted with social engineering. In the company’s initial report, an engineer downloaded malware disguised as an assignment during a fake job interview; the attackers then exploited the compromised computer and an internal artificial intelligence tool to take control of two other engineers’ devices and access the exchange’s wallets. g1 reports that the sequence began in June and culminated in the theft on October 29; according to Reuters, the attack may be the largest financial theft in history.

Binance suspended withdrawals globally after the incident, but restored the service on Sunday and said 98% of the affected assets had been replenished by Saturday, while it had set aside more than 100% of the funds needed to cover the loss. The company also said it would increase investment in artificial-intelligence threat detection and work with authorities and outside experts. The FBI attributed the attack to North Korea, which rejected the accusation.