Binance said a fake job interview was part of the multistage attack that culminated in the theft of $6.3 billion in October. According to its preliminary investigation, a software engineer downloaded a malicious coding assignment onto a work computer in September; the assignment’s setup ran malware that evaded the company’s endpoint security tools.
In a July interview with Cointelegraph, Binance security chief Jimmy Su had warned that fake coding assessments could compromise employees’ devices and let attackers harvest credentials. Su said Binance was responsible for detecting and stopping such code even when employees pursued outside jobs on work computers. Binance said it was increasing security investment and seeking an independent review, but would keep some technical details and measures confidential.
