Binance says a $6.3 billion crypto heist began with malware and fake job interviews

Binance says attackers used malware, fraudulent recruitment interviews and an internal AI tool to compromise engineers before draining $6.34 billion from the exchange’s hot wallets. The intrusion began with an accidental malware download, expanded through a fake job process targeting a wallet developer, and culminated in a malicious script using stolen credentials. Binance says $2.85 billion was frozen or intercepted. The FBI attributed the attack to North Korea, while Pyongyang rejected the allegation.











