A large exchange has said that the largest theft in its history began not with a breach of code but with an ordinary hiring conversation, in which a trusted professional channel became a door for the attackers. The account, given by Binance co-CEO Richard Teng, points to fake job interviews and an internal AI tool as the means of a $6.3 billion loss, a reminder that in digital systems the human being on the other side of a résumé can be the weakest and most important point of entry. One outlet has linked the operation to North Korea through LinkedIn, but that attribution remains a report rathe
Binance Attributes $6.3 Billion Crypto Heist to Fake Job Interviews and an Internal AI Tool
It started with a person being approached through a believable hiring process.
Mark
Why does the job interview detail matter so much?
Mimi
Because it shows the way in was a person, not a flaw in the blockchain. An engineer was approached through a hiring process and, according to the reports, malware followed.
Mark
And the AI tool? Where does it fit?
Mimi
Richard Teng named it as part of how the theft was carried out. It was an internal tool, so it points to access inside the company.
Luke
Careful there. The reporting says the tool was involved, not how. We don't have a description of what it did.
Mark
What about North Korea?
Mimi
Fortune's headline says North Korea used LinkedIn and fake interviews to trick the engineer.
Luke
That's one outlet. The other headlines don't make that claim, and there's no official attribution in what we have. It's reported, not confirmed.
Mark
Is the $6.3 billion figure solid?
Luke
It's the number attached to the story across several outlets, and it comes from Binance's own account. I'd treat it as the company's figure until something independent backs it up.
Mimi
What's missing is a lot: dates, recovery, who the engineer was, and what Binance has changed.
Luke
Right. Those are unknowns, not quiet details we can fill in.
Der Puls
- A $6.3 billion theft has been traced by Binance to fake job interviews, and the sheer scale is jolting the crypto world.
- Reports say a Binance engineer was deceived by a bogus interview and malware, turning a routine hiring process into the point of entry.
- A single outlet's claim that North Korea ran the operation through LinkedIn is raising alarm, though no official attribution has yet confirmed it.
- Binance is under pressure to reveal how the attackers reached an internal AI tool, how the funds moved, and what it has changed since.
- The trajectory now depends on official attribution, whatever recovery of the stolen funds is possible, and tighter rules for recruiting contacts and internal tool access.
A large exchange has said that the largest theft in its history began not with a breach of code but with an ordinary hiring conversation, in which a trusted professional channel became a door for the attackers. The account, given by Binance co-CEO Richard Teng, points to fake job interviews and an internal AI tool as the means of a $6.3 billion loss, a reminder that in digital systems the human being on the other side of a résumé can be the weakest and most important point of entry. One outlet has linked the operation to North Korea through LinkedIn, but that attribution remains a report rather than a finding, and the larger question of who is responsible and what can be recovered is still unfolding.
Binance says the largest theft in its history began with something as ordinary as a job interview. According to co-CEO Richard Teng, hackers posed as recruiters or employers, used that interview as cover, and then made use of an internal AI tool to carry out a $6.3 billion theft of cryptocurrency.
Several outlets carry the same basic account. The Washington Post adds that malware and a bogus interview let the attackers reach the funds, which suggests a Binance engineer was tricked and the interview served as the delivery route for malicious software.
Fortune goes furthest, reporting that North Korea used LinkedIn and fake interviews to deceive the engineer. That is one outlet's report. No formal attribution from Binance or any government agency is included in the available material, so the link should be read as reported, not established.
What stands out is that the attack did not begin by breaking cryptography or storming the system from outside. It began with a person inside the company, approached through a professional channel and a believable hiring process. The sources do not explain how the AI tool was used, how the funds were moved, when the theft occurred, how long it went unnoticed, or how much has been recovered.
What comes next is fairly clear. Official attribution would settle the North Korea question. Recovery efforts will show how much of the loss is permanent. And Binance and other exchanges will face pressure to change how staff handle outside recruiting contacts and how tightly internal tools, AI ones included, are secured.
Binance says the largest theft in its history began with something as ordinary as a job interview. According to the company, hackers posed as recruiters or employers, used the interview as cover, and then took advantage of an internal AI tool to carry out a $6.3 billion theft of cryptocurrency.
The account comes from Binance co-CEO Richard Teng. CNBC reports that he named two ingredients: the fake job interviews and the AI tool. The Verge and Yahoo Finance carry the same basic claim in their headlines, describing the interviews as the opening that helped attackers complete what Yahoo calls a record crypto heist.
The Washington Post adds a technical detail. Its headline says malware and a bogus job interview let the attackers take $6.3 billion from the exchange. Taken together, the outlets describe a Binance engineer being tricked, with the interview serving as the delivery route for malicious software.
Fortune goes furthest on who may be responsible. Its headline says North Korea used LinkedIn and fake job interviews to deceive a Binance engineer in the hack. That is one outlet's report. The material available here does not include a formal attribution from Binance or from any government agency, so the North Korea link should be read as reported rather than established.
The pattern is worth noting even with those caveats. The attack, as described, did not start by breaking cryptography or storming a system from outside. It started with a person on the inside being approached through a professional channel and a believable hiring process. The AI tool Binance mentions was internal, which suggests the attackers eventually reached something inside the company's own environment. The available reporting does not explain how that tool was used, and it does not say how the funds were moved.
The sources also leave open several basic questions. They do not say when the theft occurred, how long it went undetected, or how much of the $6.3 billion has been traced or recovered. They do not identify the engineer, and they do not describe what Binance has changed since.
What to watch next is fairly clear. An official attribution would settle whether the North Korea claim holds. Any recovery effort for the stolen funds will show how much of the loss is permanent. And Binance, along with other exchanges, will face pressure to change how staff handle outside recruiting contacts and how tightly internal tools, AI ones included, are locked down.
Bemerkenswerte Zitate
Hackers used fake job interviews and an internal AI tool to steal $6.3 billion in crypto (paraphrased from CNBC's report).— Richard Teng, Binance co-CEO
Möchten Sie die ganze Geschichte?
Das Original lesen bei Google News ↗
Technology