Hackers stole $6.3 billion from Binance via fake interviews

According to @bbcnews on TikTok, hackers stole $6.3 billion from Binance using fake job interviews and a compromised internal AI tool. The report states that a software developer downloaded malicious software during a second video interview after being approached on a job hunting website. The attackers also took control of an internal AI tool to complete the theft. While the FBI and crypto investigators attribute the attack to North Korea, the North Korean regime has called the allegations absurd.

Why it matters

This incident shows that even large organisations with sophisticated defences can be compromised through a single human error. For a Swiss business, the risk is no longer just about securing your perimeter or your database. The attack surface now includes your recruitment processes and the third-party AI tools your developers use daily. You must treat every software assignment or external file as a potential threat vector.

• Verify the identity of all external contractors and recruitment partners.
• Audit internal AI tools to ensure they cannot be used to bypass core security protocols.
• Implement strict sandboxing for any software downloaded during testing or onboarding.

What to watch

You should audit how your technical staff handles external files during onboarding or testing. Verify the security of any internal AI tools that have access to your codebase. It is not enough to secure your network if your recruitment process creates a backdoor. Review your software supply chain to ensure that third-party assignments do not bypass your existing security protocols.

Within a year, automated audits will likely replace manual checks. This happens only if regulators mandate strict verification for every third-party AI tool used in hiring.