On October 29, attackers moved about $6.3 billion out of Binance, the world’s biggest crypto exchange, most of it in roughly 20 minutes. Binance’s early investigation pointed to a DevOps engineer’s compromised laptop, which gave the attackers access to an internal system where they could submit unauthorized withdrawals. Binance has since said it found additional points of breach. On October 31, the FBI attributed the theft to North Korean hackers it tracks as TraderTraitor.
Why it matters: you do not need to hold crypto to learn from this. Attackers go after the people with the most access, like admins, developers and finance staff, and North Korean groups have a history of reaching them through fake job offers and “coding tests.”
One step today: limit admin and payment access to the people who need it, require a second approval for large transfers, and keep those laptops patched and monitored.
Questions about protecting your team’s devices? Call (818) 791-0055 or visit contact VanquishNet.
Sources: FBI, Reuters, BleepingComputer.