Binance CSO unwittingly foreshadowed $6.3B hack tactic months before attack

In a July interview, Binance chief security officer Jimmy Su explained how fake coding assessments could compromise employee devices, a tactic later used in the exchange’s record-breaking hack.

Months before Binance lost $6.3 billion to a hack, its chief security officer described to Cointelegraph how a fake job interview could give attackers a foothold inside the exchange — closely resembling one of the entry methods later used against the exchange.

During a July interview about Binance’s response to rising security threats, Jimmy Su told Cointelegraph that fake job interviews were “something we worry about a lot internally,” explaining how attackers could tailor a job opportunity to an employee before persuading them to run code as part of a technical assessment. 

“And once that gets executed, the device is compromised and then they can start harvesting credentials,” Su said, adding that attackers could then use that to penetrate further into the network.

Read more