🚨 🇰🇵 Binance reveals how North Korean hackers penetrated its systems through a months-long cyber operation before stealing $6.34 billion in digital assets.
- June: The attackers took advantage of the installation of Homebrew software that was hacked to reveal the role of a wallet engineer and his colleagues.
- September: Hackers posed as recruiters and company managers during fake job interviews, tricking another engineer into downloading a malicious coding assignment.
- October 20: The attackers used a compromised computer and an internal AI tool to access two other wallet engineer devices and steal credentials.
- October 29: Using the stolen credentials, hackers deployed a malicious container and gained access to the internal signing operations of the Binance wallet.
- Attackers exploited Ethereum's EIP-7702 authorization mechanism to grant a malicious smart contract control over wallet transactions. - They bypassed normal withdrawal controls and transferred approximately $6.34 billion in digital assets to addresses controlled by attackers.
The FBI attributed the attack to North Korea.