Binance Chief Security Officer Jimmy Su: Security incident caused by fake interview code attack.
Binance Chief Security Officer Jimmy Su stated in July that fake job interviews could lure employees into running malicious code on company devices, leading to device compromise, stolen credentials, and subsequent infiltration of internal networks. In September, a Binance software engineer downloaded malicious programming assignments to his work computer during a fake interview, an incident that became part of the multi-stage attack in the $630,000 theft in October. Jimmy Su pointed out that attackers bypassed antivirus tools by exploiting seemingly normal technical evaluation steps. Binance's investigation stated that the malicious app's installer evaded endpoint security tools through obfuscation techniques. Binance has intercepted 57 suspected North Korean-related cyber threats so far this year. Following the October attack, Binance strengthened its equipment and access controls, rebuilt affected wallet systems and internal AI tools, and increased investment in endpoint protection and development environment security.