Binance hack began with a fake job interview
क्या हुआ
Binance said at a media briefing today, 3 Nov, that the roughly $6.3 billion hack began with a fake job interview, and that North Korea-linked attackers prepared it over many months (CoinDesk).
• According to chief security officer Jimmy Su, a software engineer was contacted in September on a legitimate job platform by someone posing as a "project director"; in a second interview he was told to download a coding assignment onto his work computer, which contained zero-day malware
• In June, another engineer had installed a tampered Homebrew package while searching for an AI tool
• On 20 Oct the attackers used the infected computer and an internal AI tool to reach two wallet engineers' computers; on 29 Oct they ran a malicious script with stolen credentials, and funds began leaving at 20:05 UTC
• The attacker used Ethereum's EIP-7702 feature to gain control over a hot wallet; containment took until 00:10 UTC on 30 Oct
• According to CEO Richard Teng, about $2.85 billion has been frozen and about 98% of affected tokens have been replenished with company funds; he said users won't be affected
The FBI has blamed North Korea for the hack; North Korea denies it.
इसका मतलब
This is an example of "social engineering": instead of breaking into a system directly, hackers win an employee's trust and get malware onto their computer. Zero-day malware exploits a weakness that security software does not yet know about.
Lesson for ordinary users: don't download files sent by strangers as a job offer or "assignment", and remember that the security of coins kept on an exchange is in the exchange's hands. This is for understanding only, not buy/sell advice.
सिर्फ़ समझ के लिए, prediction नहीं। यह buy/sell सलाह नहीं है, ख़बर पढ़कर सीधे trade न करें।
Source: www.coindesk.com