Binance Says Fake Recruitment Led Attackers to Wallet Systems

Binance said a fake recruitment approach gave attackers a path from an engineer’s work computer to wallet-signing systems in an incident that affected about $6.34 billion in digital assets. Binance said a person posing as a project director approached an engineer in September through a legitimate job-search site and sent a malicious coding task to the engineer’s work computer. Binance said the compromised workstation and an internal AI tool gave attackers access to two colleagues’ computers on Oct. 20. Binance said stolen credentials were used on Oct. 29 to set up a container and execute a malicious script.