Malware & Fake Job Interviews: How $6.3 Billion Was Stolen from Binance
A landmark cyberheist revealed by The Washington Post and other major outlets shows that $6.3 billion was stolen from Binance through a sophisticated blend of malware and social engineering. Attackers posed as recruiters on LinkedIn, conducted fake job interviews, and tricked a Binance engineer into downloading malicious code.
The Attack Workflow
- Targeted Approach: Hackers identified a Binance engineer and built a convincing fake recruiter profile.
- Malware Delivery: During the interview process, the victim was asked to run a "coding test" that actually deployed stealer malware.
- Silent Execution: The malware operated in the background, exfiltrating private keys and session tokens.
- Large-Scale Transfer: Over several weeks, the attackers moved $6.3 billion across multiple wallets, exploiting Binance's cross-chain bridges.
Why It Succeeded
- Human Trust: Even tech-savvy professionals fell for the ruse.
- AI-Powered Social Engineering: Deepfake audio and polished profiles increased credibility.
- Cross-Chain Complexity: Moving stolen funds across multiple blockchains obscured the trail.
Key Takeaways
- Always verify recruiter identities through official channels.
- Never download "test tasks" from unsolicited messages.
- Use hardware wallets and multi-sig for large holdings.
- Stay updated on social engineering tactics targeting crypto professionals.
Freely curated and adapted from Google News Top Stories coverage