Binance report: fake job interview and trojanized pyenv led to $6B+ theft
xiaohu · x · 2026-11-04
Binance's initial report reconstructs how North Korean hackers stole over $6 billion: an engineer was lured via a fake recruiter with a real-looking video interview, then asked to run a "coding test" on his work machine. The installer silently replaced pyenv with a trojanized build that connected to attacker servers and covered its tracks, evading Binance's antivirus. From there hackers pivoted into wallet systems over a month. Binance warns that employee LinkedIn profiles remain prime social-engineering targets.
More from Safety
- Foreign Policy essay: automation bias, not doom, is the AI risk to focus on now — mchorowitz · 2026-11-04
- October AI Safety Paper Highlights: Clean Neurons, OpenAI Monitoring, Natural Schemers — gasteigerjo · 2026-11-04
- Anthropic silently pushed a server-side rule to Claude Code banning recreations of specific games — alex_verem · 2026-11-04
- Binance discloses $6B+ heist, largest in history, warns of AI-accelerated social engineering — evilsocket · 2026-11-04
- Russian-language prompt bypasses ChatGPT's NSFW image guardrails, Reddit user reports — Anqyx9852 · 2026-11-04
- Open-source 'Palantir for Cybersecurity' maps live exploits and routes fixes to coding agents — Fowe · 2026-11-04