North Korean cryptocurrency thieves tricked a Binance software engineer into downloading malware onto their work-issued computer during a fake job interview process before last week’s record-breaking $6.3 billion heist.
In an incident report published on Tuesday, the cryptocurrency exchange said several techniques - including social engineering via fake job interviews, malware downloads, compromised internal AI tooling, endpoint takeover, and an “advanced transaction-authorization method” - led to the October 29 security breach.
“Our current investigation indicates that this was a sophisticated, multi-stage campaign,” the incident report said. “It was not a single isolated breach or a simple phishing incident.”
Over the weekend, the FBI attributed the theft to TraderTraitor, a North Korean hacking operation linked to Lazarus Group, known for combining espionage with massive cryptocurrency heists. The Pyongyang-backed crew is also highly adept at job market scams - both posing as IT workers, who are then hired by Western companies, and as potential employers to lure software engineers into downloading malware and infecting corporate devices.
FBI alleges that it’s North Korea, North Korea publishes a proclamation that it’s not them.
https://www.bbc.com/news/articles/c6rey4v53exgo
I’d like to see at least some detail that goes into attributing it.
They took a job interview from their work machine… 🤦
I’ve seen people set up interviews with their work email.
Yep. Mind numbingly stupid.
Well their personal computer didn’t get hacked.
People scoff at the mandatory infosec training for SOC II and ISO 27001 compliance, then download garbage to their work computer and lose $6B.
It appears the Binance hack was a social engineering stunt. Can’t say I’m surprised. Often the biggest weaknesses in any system is the people running it.
Still, who the heck takes a job interview call on their office laptop??
I assumed they were doing the interview and sent the employee an updated cv or similar, but I was wrong
The Pyongyang-backed crew is also highly adept at job market scams - both posing as IT workers, who are then hired by Western companies, and as potential employers to lure software engineers into downloading malware and infecting corporate devices.
Fr, why use your current work laptop?
Because you are trying to get a new job so fuck your current employer :D
But for real, I admit I actually did this since the interview time was during working hours and I am then, well, at work.
I don’t like taking a whole or half day off for an interview, so yeah. But I get that this is not possible for everyone.
I guess there is a point of giving no fucks you reach at some point, yeah. I’ve used the parking lot, but I was connected to different wifi.
The last time I had a work laptop, I did have to make an appointment with IT for them to install Firefox, because we couldn’t download any programs and it only came with chrome. It was incredibly annoying, but I guess I can appreciate it a little more now (but for real, why the appointment?).
Thinking about it more thoroughly though, I downloaded probably about 30k lawsuit filings over the course of my job there. Most were from trustworthy sources, but sometimes they were just in document repositories arranged by law firms.
I hope they have some way of securing that 🙃
Why is the FBI investigating? Bitcoin is deliberately untraceable (ish), private (ish), tax free currency, free from meddlesome government regulation and intererence. So why should tax funded law enfrcement for any country expend reaources investigating bitcoin related theft? These billionaires are all libertarians until they get fucked by hostile state actors and then it’s big government to the rescue.
Bitcoin is far from untraceable. In fact, it’s one of the most traceable currencies that’s ever existed.
After all, you can see exactly what address sent exactly what amount to exactly what other address. All you have to do is compromise the addresses and then you know the people. And KYC from Exchanges does an incredibly good job at that.
What do you mean by deliberately untraceable? It’s built upon a block chain ledger that tracks all transactions. I’m more amazed by those that are able to avoid tracing with this currency.
Crime is crime.
“The attackers also took steps to hide the malicious script and evade detection,”
But also, script contains comment “replace it with a malicious version”
Just deserts
North Korea has lots of tundra but I don’t think they have any deserts.
Tundras are generally deserts. One of those oddities of word definitions.
They have/had some pretty big food deserts.
North Korea do so many scams and cyber thefts mostly aimed at America.
At least nothing of any real value was lost. Bitcoins are not really better than NFT, and those are worthless today. It’s just that bitcoin can be used for illegal activities, otherwise they have no use, but that’s apparently enough for some people to still believe they are worth something.
Considering Bitcoin is almost entirely traceable, it is a really, really bad idea to use Bitcoin for illegal activity.
Except if you are a country like Russia or North Korea.
Yeah, a nation state actor can get away with using Bitcoin for illegal activity. Regular people, though, cannot.
Exactly. But the independence from government control was a HUGE selling point originally.
But it only works if you are legally immune from consequences. Like for instance Russia and North Korea.
And guess who has been using bitcoin to circumvent sanctions? 😋Well, for everyone else Monero exists. It actually is truly untraceable.
Some use crypto for illegal activities yes, but some just like their privacy, and it’s good that we have a means for people to continue to maintain their privacy in their financial dealings. Especially now that Donald has normalized the surveillance state to a formerly unimaginable degree.
And besides, the fees for transferring crypto internationally are significantly lower than transacting internationally through a bank, so saying there’s not utility for it isn’t exactly true.
Bitcoin does not protect privacy, that was a claim when it was new, but has been thoroughly debunked. Bitcoins are as traceable as any other digital payment.
Using it illegally is reserved for people or nations that are out of reach of the law.Aren’t distributed ledgers public? Once someone’s ID has been determined, aren’t their transactions publicly visible?
I think so. I’m not an expert in crypto, but I know that there are ways to connect identities to transactions, though my understanding is that it’s not a simple thing. You have to have enough data to connect a wallet to an ID, IIRC.
I read a really good book about it earlier this year: Tracers in the Dark. (Which I highly recommend. EXCELLENT book.)
