Binance Traces a $6.3 Billion Theft to a Fake Job Interview
Wednesday, November 4, 2026 · 7 min
Binance says North Korean hackers turned a fake coding assignment into access to its wallet signing service, a hijacked cPGuard update channel stole credentials from nearly 3,000 servers, and WorkOS says an attacker using the ARTEX AI framework got into an internal sales app.
Listen
Show notes
Binance says North Korean hackers turned a fake coding assignment into access to its wallet signing service, a hijacked cPGuard update channel stole credentials from nearly 3,000 servers, and WorkOS says an attacker using the ARTEX AI framework got into an internal sales app.
In this episode
- Binance says fake job interview led to $6.3 billion crypto heist — BleepingComputer
“By October 20, the attackers had used the compromised engineer's computer and an internal AI tool to compromise two additional employees working on Binance's wallet infrastructure, obtaining credentials and a container deployment token. On October 29, the hackers used the stolen…”
- Hackers hijack cPGuard autoupdate to deploy backdoor, steal data — BleepingComputer
“OpsShield, the cPGuard developer, published an alert earlier today saying the attack began on November 2 at 02:06 UTC and affected versions 5.88.12 through 5.88.19. The vendor says that it detected the compromise and stopped the malicious distribution within 12 hours after the…”
- WorkOS says attacker used ARTEX AI to breach internal sales app — BleepingComputer
“Developer platform WorkOS suffered a data breach after a threat actor accessed business contact records and summaries of customer communications. According to the company, the attacker used an AI offensive security framework to automate reconnaissance and exploitation attempts.…”