North Korea used LinkedIn, fake job interviews to trick Binance engineer in $6.3 billion hack

Binance on Tuesday disclosed that North Korean hackers used a mix of social engineering and malicious software to pull off last week’s $6.3 billion heist, the biggest in crypto history.

Speaking to reporters, company executives revealed that the hackers targeted a Binance engineer on LinkedIn and arranged a series of fake job interviews in order to persuade the employee to download an “assignment” that let them invade the company’s systems.

In a related report, Binance explained that: “Software Engineer B was contacted through a legitimate job-hunting platform by an individual posing as a Project Director. Software Engineer B had a profile on the platform that referenced his experience at Binance. The purported Project Director arranged a first-round interview with a HR representative, followed by a second-round interview with an individual claiming to be the CEO of a fictitious company.”

The report also provided additional details about a sophisticated months-long scheme that involved not only the fake LinkedIn recruitment, but also used a separate ad campaign that earlier tricked another engineer into downloading a malicious version of a popular software package called Homebrew.

Read more [paywall removed for Redditors]: https://fortune.com/2026/11/03/binance-hack-details-linkedin/?utm_source=reddit/