Binance details $6.3 billion theft after employee targeting

Binance said attackers stole more than $6.3 billion in digital assets on October 29 after a months-long intrusion that began with malicious software and a fraudulent job interview targeting employees. The exchange’s initial incident report described how compromised credentials and an internal artificial intelligence tool were used to reach its wallet systems. According to Binance, the operation began in June, when a wallet-development engineer downloaded a tampered version of the Homebrew software package while trying to install an AI coding tool. The company said it detected the anomaly, replaced the engineer’s device and changed affected credentials, but the incident exposed information about the employee’s role and colleagues on the wallet team. In September, attackers approached another engineer through a legitimate recruitment platform, posing as a project director. Binance said the employee was persuaded to download a coding assignment containing malware after a series of interviews, including one with a person claiming to lead a fictitious company. The malicious code infected the employee’s work computer. Binance said the attackers used the compromised computer and an...