Binance says a fake job interview opened the door to its $6.3 billion hack

Binance’s account of its $6.3 billion theft is less a story of one broken defense than of attackers patiently turning ordinary work routines into footholds. It says the campaign began in June, when a wallet engineer installed a tampered software package while seeking an AI coding tool; although Binance replaced the device and reset credentials, the intruders had already learned about the team. A later fake recruitment process persuaded another engineer to run malicious code, and the attackers then used that computer and an internal AI tool to reach credentials for deploying software to the exchange’s online wallet systems. The lesson is that a seemingly routine interview or developer download can give attackers the patient access needed to turn an employee’s computer into a route toward far more valuable systems.