@not_a_newt๐ TWO PHISHING TRICKS - BINANCE'S $6.34B HACK In June: a Binance wallet engineer looking for an AI coding tool clicked an Google search ad and downloaded a fake Homebrew installer -> Binance caught it, but the attackers learned who was on the wallet team In September: a second engineer was approached on a real job platform by fake recruiters, including a fake HR person and a fake CEO and promised an amazing opportunity - The engineer received a coding "assignment", but it contained malware! Weaponizing interview questions, wow. -> On Oct 29 the attacker reached Binance's wallet signing system and stole over $5 billion Why was he doing a job interview and coding task on his company laptop? #Binance #Google
View original post

















