Cryptocurrency exchange Binance’s first incident report says attackers used a coding assignment containing undetected malware and the exchange’s internal artificial intelligence tool to reach wallet engineers’ systems before the Oct. 29 theft of $6.34 billion in cryptocurrency. The FBI attributed the attack to North Korean hackers; Pyongyang denies responsibility [bleepingcomputer.com][theblock.co][bbc.co.uk]. The report traces the intrusion to June, when a wallet-team engineer downloaded a tampered Homebrew installer. Binance detected the compromise and replaced the device, but says the attackers learned the engineer’s role and colleagues’ identities. In September, a different engineer downloaded malicious code during a sham recruitment process; the malware replaced a legitimate development component and evaded endpoint security detection [thehackernews.com][bleepingcomputer.com]. On Oct. 20, attackers used the compromised computer and Binance’s internal AI tool to take control of two other engineers’ systems and obtain a container-deployment token. They later used stolen credentials to reach the wallet-signing service; Binance said the transfers bypassed ordinary withdrawal procedures. The company says it has rebuilt affected wallet systems and AI tools, revoked credentials and tokens, and is commissioning an independent cybersecurity review [theblock.co][thenationalnews.com][coindesk.com]. Highlights: • Prior attempts: Binance said it detected and prevented 57 suspected North Korea-linked cyberthreats during 2026, including attempts using similar deceptive tactics [theblock.co][wired.com]. • Forensic evasion: Binance said attackers concealed malicious activity and removed traces of the compromise, complicating the investigation [bleepingcomputer.com][thehackernews.com]. • Recruitment tactic: The supposed human resources interviewer shared a social media account featuring personal photos and videos to build trust before the engineer received the coding assignment [bleepingcomputer.com][dawn.com]. • Investigation review: Binance said it is keeping some new security measures private to prevent attackers from compromising them [thenationalnews.com]. Perspectives: Rafe Pilling, senior director of threat intelligence at Sophos, said the sequence matched the TraderTraitor playbook: compromising engineers and moving through their environment to subvert transaction-authorization systems, rather than simply stealing a wallet key. (Wired) "Organizations need to counter this with adequate controls in place. Particularly, controls around what can be downloaded and executed on a corporate laptop, as well as the permissions granted to the user." — Tyler Reguly, associate director of security R&D at Fortra Sources: • Binance reveals hackers used fake job interviews, malicious code in $6.3bn heist - dawn.com • Binance says fake job interview led to $6.3 billion crypto heist - bleepingcomputer.com • Binance says hackers used fake job interview to breach computer before $6.3 billion attack - reddit.com • Binance says hackers used fake job interviews and an internal AI tool to pull off the $6.3 billion heist - theverge.com • Binance Says Hackers Used Fake Job Interviews, AI Tool to Steal $6.3 Billion In Crypto - slashdot.org • Binance hackers used fake job interview to compromise computer before $6.3 billion attack - reddit.com • Binance Traces $6.3B Hack to Employee Duped by Fake Job Interview - pcmag.com • Binance reveals hackers used fake job interviews, malicious code in $6 billion heist - techxplore.com • Binance reveals hackers used fake job interviews, malicious code in $6-billion heist - insiderpaper.com • North Korean fake job interview led to $6.3B Binance heist - theregister.com • Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist - wired.com • Binance says fake job interview helped North Korean hackers steal $6.3 billion in crypto - nextgov.com • Binance Hackers Used Fake Job Interviews to Steal Six Billion Dollars - androidheadlines.com • Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft - thehackernews.com • Binance says fake job interviews used as part of $6.3bn crypto hack - bbc.co.uk • Binance Says Hackers Plotted $6.3 Billion Crypto Heist for Months - nytimes.com • North Korea denies being behind record $6.3bn Binance hack - bbc.co.uk • Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist - techcrunch.com • Binance battles to save its brand after record $6.3bn crypto hack - theguardian.com • North Korea says US allegations linking it to Binance heist are 'absurd rhetoric' - firstpost.com • Binance Hack: Crypto Exchange Reveals How Fake Job Interview Led to $6.3B Heist - coingape.com • Binance Hackers Used Fake Job Interview in $6.3 Billion Attack - aawsat.com • Binance hackers used fake job interview in $6.3B attack - staradvertiser.com • Hackers used fake job interview in $6.3bn Binance attack - timeslive.co.za • Binance reveals hackers used fake job interviews, malicious code in $6-bn heist - yahoo.com • Binance's $6.3 billion hack began with a fake job interview, and a campaign 'built over many months' - coindesk.com • Binance details how a fake job interview led to a $6.3B crypto heist - foxbusiness.com • Hackers usaram entrevista de emprego falsa antes de roubo de US$ 6,3 bilhões da Binance - globo.com • Binance says hackers used fake job interviews to pull off a $6 billion crypto heist - businessinsider.com • Binance hackers used fake job interview in $6.3 bil. attack - koreatimes.co.kr • Binance says fake job interviews and internal AI tool used in $6.3bn heist - thenationalnews.com • Binance says hackers used fake job interview, internal AI tool in $6.3 billion breach - theblock.co • Hackers behind $6.3bn Binance heist ‘used malware and bogus job interviews’ - theguardian.com • Binance says fake job interviews, AI tool used in $6 bln theft blamed on N. Korea - koreaherald.com • Binance revela que ciberataque de US$6.300 millones comenzó con falsas entrevistas de trabajo - biobiochile.cl • Binance Says $6.34 Billion Hack Began With Fake Job Interview - bitcoinmagazine.com • Binance dezvăluie cum au reușit hackerii să fure 6,3 miliarde de dolari. Interviuri false de angajare, cheia atacului - digi24.ro • Binance hackers used fake interviews and social media profiles in $6.3bn heist - ft.com • Interviuri de angajare false au fost folosite de hackeri pentru a fura criptomonede de 6,3 miliarde de dolari de la Binance - antena3.ro • Binance traces $6.34B hack to fake interviews and AI tool breach - crypto.news • Binance: hacker usano un falso colloquio di lavoro per il furto da 6 miliardi - gazzettadimalta.com • How malware and a bogus job interview let attackers nab $6.3B from Binance - washingtonpost.com • North Korea used LinkedIn, fake job interviews to trick Binance engineer in $6.3 billion hack - reddit.com • Nigeria: Binance Reveals Hackers Used Fake Job Interviews, Malicious Code in $6-Bn Heist - allafrica.com • Binance reveló cómo fue el hackeo de US$ 6.300 millones: una falsa entrevista laboral a un empleado - perfil.com • Con falsas entrevistas de trabajo: Así fue como hackers se robaron 6 mil mdd a Binance - elfinanciero.com.mx • North Korean Hackers Abuse Internal AI Tool and Fake Job Interviews in $6.34 Billion Binance Heist - cybersecuritynews.com • Faux entretien d'embauche, détournement d'IA: Binance révèle le mode opératoire du piratage record - lalibre.be • Хакеры обокрали Binance на шесть миллиардов долларов, устроив фейковое собеседование с сотрудником криптобиржи - tvrain.tv • 彭博: 幣安63億美元竊案駭客靠假求職面試得手 - bastillepost.com • Faux entretien d’embauche, détournement d’IA : Binance révèle le mode opératoire du piratage record - lesoir.be • Binance: interviuri false de angajare, folosite în atacul de 6,3 miliarde de dolari - ziarulnational.md • Криптобиржа Binance рассказала, как ее обокрали на шесть миллиардов долларов. Чтобы проникнуть в системы компании, хакеры устроили фейковое собеседование с ее сотрудником - meduza.io • Binance, falsi colloqui di lavoro (e sistemi di AI) per realizzare il furto record da 6,3 miliardi di dollari in criptovalute - corriere.it • Фальшива співбесіда на $6,3 мільярда: Binance розкрила спосіб злому - epravda.com.ua • Binance says fake job interviews, AI tool used in US$6 bln theft blamed on N. Korea - yna.co.kr • Faux entretien d'embauche, détournement d'IA… Binance révèle le mode opératoire du piratage record dont elle a été victime - lefigaro.fr • Binance揭露63億美元竊案攻擊鏈，駭客以假面試誘使工程師執行惡意程式 - ithome.com.tw • Vụ Binance bị hack 6,3 tỷ USD bắt nguồn từ một kỹ sư muốn nhảy việc - vnexpress.net • Verdens største kryptobørs: Hackere brugte falske jobsamtaler til milliardtyveri - dr.dk --- 📰 Story aggregated by Kagi News