North Korean fake job interview led to $6.3B Binance heist

	North Korean fake job interview led to $6.3B Binance heist(theregister.com)
	644 points by smalltech 7 days ago \| 380 comments
	tl;dr: North Korean hackers (TraderTraitor/Lazarus) pulled off a $6.3B Binance heist by social-engineering an engineer through a fake job interview, tricking them into running a malware-laced "assignment" that replaced a legitimate pyenv binary with a malicious version. The attackers then pivoted via an internal AI tool to compromise two wallet DevOps engineers, stole a container deployment token, and used it to launch the theft on October 29. Binance has since rebuilt the wallet system, rotated all credentials, and is working with law enforcement to trace funds.
	HN Discussion: ~Real failure was weak deployment security (tokens on laptops instead of CI-only) ↑Engineer acted irresponsibly by misusing work laptop for outside interviews ~The compromised internal AI tool is the overlooked critical vulnerability here ↑Fake NK recruiter scams are widespread; platforms like LinkedIn fail to combat them ↑Personal anecdotes confirming encounters with suspected North Korean fake interviewers/recruiters