Binance says hackers stole $6.3 billion in cryptocurrency after using a fake job interview, malicious software and the exchange’s internal artificial intelligence tool to access systems used to develop digital wallets. The attack took place on October 29 and could become the largest financial theft on record, according to the company’s account of the incident.
In a report released Tuesday, Binance described a campaign that began in June, when an employee on its wallet development team downloaded an AI tool modified by attackers. The exchange detected the issue, replaced the computer and changed access credentials, but says the attackers had already exposed the roles of that employee and other team members.
In September, a second software engineer looking for a job took part in what appeared to be a legitimate hiring process. It included a video call with someone presented as the CEO of a fictional company. During the process, the employee downloaded a malicious code repository, giving the hackers access to another computer connected to Binance’s wallet development team.
The attackers later used a Binance internal AI tool as part of their efforts to reach the development environment. On October 20, they combined access to an infected computer with the tool to take control of systems belonging to two wallet developers. Binance distinguishes this use of its internal system from the malicious AI software downloaded in June, which was used to compromise an employee’s computer.
The final stage came nine days later. Binance says an attacker used the second developer’s computer and credentials stolen from the first employee to run a malicious script that triggered the attack.
The FBI attributed the operation to a hacking group, an accusation rejected by the North Korean government. Binance says it is reimbursing all customers who lost funds in the breach.
The exchange apologized to affected users and partners and said it plans to increase investment in AI-based detection tools, establish a security research fund and develop targeted projects with leading AI companies.
Sources: Olhar Digital.