Binance Says Hackers Stole $6.34 Billion in October Heist

Binance said attackers stole about $6.34 billion in cryptocurrency on October 29 after a months-long campaign that began with malware targeting employees and later exploited a fake job interview and an internal AI tool. The FBI attributed the heist to North Korea-linked hackers, while North Korea denied responsibility. In an investigation update, Binance said the first foothold came in June, when an employee on its wallet infrastructure team downloaded a tampered Homebrew package after clicking a malicious advertisement. The exchange said it detected the malware, replaced the employee’s device and changed credentials, but the attackers had learned the employee’s role and the identities of colleagues. In September, according to Binance, a person posing as a project director contacted another engineer through a legitimate job-hunting platform. The engineer was interviewed by people posing as a human-resources representative and the chief executive of a fictitious company. During the second interview, the engineer was asked to download a coding assignment that contained malware and installed on a work computer. Binance said the attackers used that compromised computer and an...