Fake Interview Lured Binance Victims Into a $6 Billion Hack

WHO:

Mashable - Binance, a cryptocurrency exchange, was the target of a hack attributed to North Korean hackers.

MJ Tsai - Rafael Nam reported on the Binance cyber heist.

Inc - Hackers used a fake job interview as part of their effort to infiltrate Binance.

WHAT:

Futurism - The attack siphoned 233.46 million XRP from five wallets, then stole other cryptocurrencies, including bitcoin.

Futurism - Binance said it had thwarted “57 suspected North Korea-linked cyber threat cases.”

Futurism - North Korea denied involvement in the hack; the FBI blamed a North Korean hacking group.

Mashable - Hackers stole more than $6 billion from Binance.

MJ Tsai - Binance suffered a $6.3 billion cyber heist, described in the article as the world’s biggest-ever cyber heist.

Inc - The hackers’ fake job-interview tactic was described as a threat that could compromise employees at any business.

WHEN:

MJ Tsai - The heist may have taken place in about twenty minutes.

MJ Tsai - Binance released an initial assessment of the attack on Tuesday.

MJ Tsai - The attacks had been in the making for months.

HOW:

Futurism - An employee downloaded a tampered Homebrew installation after clicking a malicious ad. Binance detected the anomaly, replaced the device, and changed relevant credentials.

Futurism - Hackers later posed as a project director and arranged sham interviews through a job-hunting platform. A text-based interview assignment contained malicious code that executed during installation.

Futurism - The hackers used the compromised employee’s machine to access an internal AI tool and compromise another wallet developer’s computer; stolen credentials and a malicious script were then used to launch the attack.

Mashable - The hack started with a fake job interview.

Inc - Hackers used a fake job interview to work toward infiltrating Binance.

MJ Tsai - Binance’s initial assessment described the attack as the result of months of preparation, despite the heist itself possibly taking about twenty minutes.

(UPDATED November 5, 2026 22:13 UTC)

Hackers attributed by the FBI to North Korea stole billions from cryptocurrency exchange Binance. A fake job interview and malicious software helped infiltrate employee devices and steal credentials. Binance says it thwarted 57 suspected North Korea-linked cyber threats; North Korea denies involvement.

--

(UPDATED November 5, 2026 20:10 UTC)

Hackers stole $6.3 billion from Binance in a massive cryptocurrency heist. North Korean attackers reportedly used a fake job interview to infiltrate the exchange. Months of preparation preceded the theft, which may have taken just twenty minutes.