Binance CEO details $6.3 billion theft linked to North Korea-linked hackers
Story 16, from The Record
Binance CEO Richard Teng described a months-long attack by North Korean hackers that led to a $6.3 billion theft, involving social engineering, compromised devices, and internal tools. North Korea denied responsibility.
Key points
- The breach began in June with an engineer downloading malicious software disguised as an AI tool.
- Hackers used fake job interviews and social engineering to compromise multiple devices and access internal systems.
- The attack involved replacing legitimate tools with malicious ones and using stolen credentials to initiate transactions.
- Binance froze $2.85 billion in assets but could not stop the full $6.34 billion theft.
- North Korea denied involvement, calling the accusations 'absurd' and accusing the U.S. of seizing cryptocurrency assets.
- The attack is part of a pattern of North Korean cyber operations targeting cryptocurrency firms.
Why it matters
This incident highlights the evolving tactics of state-sponsored cybercriminals, particularly North Korea, who use sophisticated supply-chain attacks and social engineering to target cryptocurrency firms. It underscores the need for stronger endpoint security, continuous monitoring, and rapid response protocols.
Counterpoint
The attribution to North Korea is based on patterns and past incidents, but definitive proof of state involvement remains challenging without direct evidence.
Sources
- Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibility (The Record)
This summary was written by a language model and may contain errors. Read the original for the full story.