Fake Interview Lured Binance Victims Into a $6 Billion Hack
WHO:
Mashable - Binance, a cryptocurrency exchange, was the target of a hack attributed to North Korean hackers.
MJ Tsai - Rafael Nam reported on the Binance cyber heist.
Inc - Hackers used a fake job interview as part of their effort to infiltrate Binance.
WHAT:
Futurism - The attack siphoned 233.46 million XRP from five wallets, then stole other cryptocurrencies, including bitcoin.
Futurism - Binance said it had thwarted “57 suspected North Korea-linked cyber threat cases.”
Futurism - North Korea denied involvement in the hack; the FBI blamed a North Korean hacking group.
Mashable - Hackers stole more than $6 billion from Binance.
MJ Tsai - Binance suffered a $6.3 billion cyber heist, described in the article as the world’s biggest-ever cyber heist.
Inc - The hackers’ fake job-interview tactic was described as a threat that could compromise employees at any business.
WHEN:
MJ Tsai - The heist may have taken place in about twenty minutes.
MJ Tsai - Binance released an initial assessment of the attack on Tuesday.
MJ Tsai - The attacks had been in the making for months.
HOW:
Futurism - An employee downloaded a tampered Homebrew installation after clicking a malicious ad. Binance detected the anomaly, replaced the device, and changed relevant credentials.
Futurism - Hackers later posed as a project director and arranged sham interviews through a job-hunting platform. A text-based interview assignment contained malicious code that executed during installation.
Futurism - The hackers used the compromised employee’s machine to access an internal AI tool and compromise another wallet developer’s computer; stolen credentials and a malicious script were then used to launch the attack.
Mashable - The hack started with a fake job interview.
Inc - Hackers used a fake job interview to work toward infiltrating Binance.
MJ Tsai - Binance’s initial assessment described the attack as the result of months of preparation, despite the heist itself possibly taking about twenty minutes.
(UPDATED November 5, 2026 22:13 UTC)
Hackers attributed by the FBI to North Korea stole billions from cryptocurrency exchange Binance. A fake job interview and malicious software helped infiltrate employee devices and steal credentials. Binance says it thwarted 57 suspected North Korea-linked cyber threats; North Korea denies involvement.
--
(UPDATED November 5, 2026 20:10 UTC)
Hackers stole $6.3 billion from Binance in a massive cryptocurrency heist. North Korean attackers reportedly used a fake job interview to infiltrate the exchange. Months of preparation preceded the theft, which may have taken just twenty minutes.