These North Koreans are crafty… even getting US citizens to host laptop farms in their house for remote working.

https://www.justice.gov/opa/pr/arizona-woman-sentenced-17m-i...

No single person, especially an engineer, should have the ability to transfer funds. That's nuts and it says a lot about the security posture of that company.

> Binance’s endpoint security tools did not immediately detect the malware.

Yes of course they didn't. The whole "endpoint security" industry is a scam. They're attempting to (or attempting to appear to) solve an impossible problem. All they do is install spyware and backdoors, reducing security rather than enhancing it.

I like that the article referred to the hackers as miscreants. I don't see that word used very often. "Then, on October 20, the miscreants used the compromised computer and an internal AI tool to gain access to the computers of wallet DevOps engineer A and another wallet software developer, Engineer C."

The practice of installing software during a job interview should be forbidden by law.

Some companies require you to install Windows remote administration tools (basically root kits) on your machine to check whether you are using search engines or AI. It is insane.

People are talk about all the security aspects of this which are all valid. But what I saw here is that Binance is running a sweatshop here. So even someone holding secret for billions is actively looking for potential role from a Noname company.

Why did the employee have direct access to $6.3 billion in customer funds?

“shared a social media account with him, including personal photos and videos posted on the platform, in order to build trust" -- I wonder if these were real photos and videos, or AI fakes. It's crazy how many fake profiles Instagram pushes into my feed lately, and how many people probably don't even realize they're fake.

Source posted earlier: "29 October Binance Security Incident: Initial Findings and Response Update" https://news.ycombinator.com/item?id=50359377

I have been getting these since early 2023, still, most of them are simple to spot, the other side typically has video turned off, asks a bit about your experience and just nods without digging, they are in a hurry to send you their coding challenge.

In one of these many calls I got to see the face from the other side but lasted a few seconds only. Then he claimed that internet was bad and suggested we continued without video.

In this case they claim it was a 2 rounds interview with video turned on to simulate a more normal recruiting process.

Of course all of us are prone to get caught with the shield off but what surprises me is that the targeted dev took the challenge in the device from work.