Binance reports hackers used fake interviews to orchestrate multi-billion dollar heist
Binance's internal post-mortem reveals that a sophisticated combination of malware and social engineering led to the company's largest security breach.
Binance has disclosed that the recent multi-billion dollar cryptocurrency theft was executed through a prolonged campaign involving malware and social engineering. The breach originated in June, when a developer downloaded a compromised installer via a malicious Google advertisement, which granted unauthorized access to internal engineering details.
By September, attackers escalated the operation by targeting another engineer through a fabricated recruitment process. The perpetrators staged multiple rounds of video interviews and established credibility via social media, eventually persuading the engineer to download a malicious file disguised as an interview assignment.
Binance confirmed the breach resulted in the largest crypto theft on record. The incident underscores the vulnerability of even highly technical environments to persistent social engineering tactics designed to bypass traditional perimeter security measures.