Cryptocurrency platform Binance has said that fake job interviews and an internal AI tool were used for the massive $6.3 billion breach it reported last week.
The culprit leveraged the compromised computer of one of its engineers and used an AI tool to gain control of the wallets of two other engineers, Binance said in a post on Tuesday.
That was "used as a springboard" on October 20, as "the attackers combined a range of techniques, including social engineering by fake recruitment interviews, malicious software downloads, compromised internal AI tooling, endpoint compromise and an advanced transaction-authorisation method", the company said.
Binance also said it has taken measures to protect its systems, including rebuilding the affected wallet system in a new environment and internal AI tools and access controls.
It has also replaced affected devices and decommissioned credentials and tokens related to the affected engineers.
Binance previously said it would absorb the financial impact of the stolen funds rather than passing the losses on to customers.
The FBI on Saturday attributed the attack to TraderTraitor, a North Korean state-sponsored hacking unit. Members of the group were observed by law enforcement converting the stolen assets into ether, the FBI said in a statement, adding that it expected further laundering through related technology.
More to follow...
