north korea stole $6.3 billion from binance, and it all started with a job interview
- in june, a binance engineer installed a developer tool that turned out to be fake
- in september, another engineer got a message on a job site (company wanted to hire him, and it looked legit)
- he went through two rounds of interviews
- then they sent him a "coding assignment" to download and finish
- once the hackers were inside his laptop, they used binance's own internal ai tool to get into other engineers' laptops one by one
- on october 29 they hacked $6.3 billion
all they did was apply for a job from the other side and took away billions
if a stranger dms you a dream job tomorrow, would you download the test?