Aakash Gupta @aakashgupta

1h ago

Open on X

North Korea stole $6.3 billion from Binance by inviting one of its engineers to a job interview at a company that didn't exist. And the guy didn't even have access to the money. It took them five months and two separate hacks to pull this off. Back in June, an engineer on Binance's wallet team went looking for an AI tool and installed a tampered Homebrew package. Binance caught it, swapped the laptop and reset the passwords. Problem solved, they figured. Except by then the attackers already knew who worked on that team and what each person did. So they went recruiting. In September a different Binance engineer got a message on a real job site from someone calling himself a project director. First round was a video call with a fake HR person, who even shared a social media account full of personal photos so the whole thing felt legit. Second round was with the "CEO," who told him to download a coding assignment onto his work computer. It was loaded with malware nobody had seen bef…