Binance says hackers used fake job interviews, internal AI tool in $6 billion theft - Korea JoongAng Daily

The exchange reported that in September, a fake recruiter conducted video interviews and sent an 'assignment' repository containing 0-day malware that bypassed endpoint detection. On October 20, the attacker leveraged an internal AI tool to obtain a container deployment token, ultimately deploying a container to execute the theft.

Binance noted it has blocked 57 suspected North Korea-linked threats this year. The U.S. Federal Bureau of Investigation has attributed the theft to North Korea's TraderTraitor hacking group, which has been linked to previous cryptocurrency heists.

North Korean Denial

Kim Yo-jong, the powerful sister of North Korean leader Kim Jong-un, dismissed the FBI's findings as a 'grave political provocation' against Pyongyang. The U.S. State Department responded by emphasizing North Korea's use of cybercrime to finance its weapons programs, calling it 'a global problem that touches companies and jurisdictions around the world.'