Binance Details How North Korean Hackers Reached Wallet Signing Access

Binance said Nov. 3 that attackers reached its wallet signing service after using a fake job interview to compromise an engineer, enabling transactions outside the exchange’s normal withdrawal process. The exchange attributed the attack to North Korea. An engineer downloaded malicious code presented as an interview assignment. Attackers later used that compromised computer and an internal AI tool to reach two other engineers’ computers. Credentials on one of the machines let them deploy a container and gain access to the signing service, which approves wallet transactions.