That dream job offer might be from a North Korean hacker
Summary
Binance said suspected North Korean hackers used a fake job interview to try to compromise one of its software engineers, as part of preparations for a cryptocurrency theft the exchange valued at $6.3 billion. The company also reported a separate attempt involving altered software and said it had detected and prevented 57 suspected North Korea-linked cyber incidents so far in 2026.Key Facts
- A Binance software engineer was contacted in September on a job-hunting platform by someone posing as a project director at a fictitious company.
- A fake human-resources representative held a live video interview and used a social media profile with personal photos and videos to appear legitimate.
- In a later interview round, the supposed employer asked the engineer to download an infected code repository as an assignment.
- In June, another engineer downloaded a tampered Homebrew installation while installing an AI coding tool; Binance detected it, replaced the device and changed credentials.
- Binance said the June incident exposed the engineer and colleagues to the hacker.
- Binance reported 57 suspected North Korea-linked cyber incidents detected and prevented so far in 2026, including attempts using fake interviews and compromised software.
- Pindrop Security data cited in the article shows suspected North Korean job applicants increased from 1 in every 343 applications last year to 1 in every 47 this year across its customers.
Read the Full Article
This is a fact-based summary from The Actual News. Click below to read the complete story directly from the original source.
