Binance Details $6.34 Billion Theft After Fake Job Lure

Binance says attackers stole about $6.34 billion in digital assets on October 29 after using malware delivered through a fake job interview to compromise employee computers and reach the exchange’s wallet-signing systems. The company’s November 3 account describes a multistage intrusion that began months earlier; its findings have not yet been independently validated. According to Binance, a software engineer was contacted on a job-hunting platform in September by someone posing as a project director. After interviews with people claiming to represent a fictitious company, the engineer was asked to download a coding assignment onto a work computer. Binance says the files contained malicious code that its security tools did not detect. The exchange says attackers used the compromised computer and an internal AI tool on October 20 to gain control of two wallet engineers’ computers. One had access to a token that allowed software deployment. Nine days later, attackers used stolen credentials to reach the service that authorizes wallet transactions and initiate transfers from hot wallets, which hold assets for quick withdrawals. Binance said the affected assets were moved across...