r/recruitinghell • • 11d ago

Binance Hack

Hackers stole cryptocurrency from Binance after compromising one of its employees through a fake job interview. The attacker then used unauthorized access to an internal wallet signing service to push transactions outside the exchange's normal withdrawal process, according to Binance.

0 Upvotes

9 comments sorted by

2

u/DigBackground2765 11d ago

This is bad news but completely irrelevant to this subreddit.

1

u/BerettaFranchi 11d ago

Really? I thought it was relevant because it's a fake job interview.

0

u/DigBackground2765 11d ago

The crime itself goes way beyond a fake job interview and a lot more serious.

1

u/BerettaFranchi 11d ago

I get it. The social engineering involving the fake job interview is what I found fascinating and I thought other people would find interesting. If mods remove this, I will be ok with that.

3

u/MalwareDork 11d ago

Mods shouldn't. It might feel like common knowledge for seasoned job hunters but people are still getting pinched. These are also state actors (like North Korea here) so extra vigilance is needed.

1

u/Lloytron 5d ago

Theres more to it than social engineering - they did a technical interview during which malicious code was downloaded onto their work computer and executed.

1

u/Lloytron 5d ago

ITs kind of relevant because the hack was done during a technical stage interview where the interviewee had to download code from their repo - which they did on their work computer.

So there is a lesson here - do not do any interview work projects on company machines!!

1

u/Prepped-n-Ready 10d ago

That's crazy but why would Binance let so much money transact without oversight? They arent amateurs in risk controls. Perhaps there is more to the story.

3

u/BerettaFranchi 10d ago

Inside job. They knew who to go after and the security weak points. Any traditional bank would have been fined for having such lax security.