Binance Finds Zero-Day Trojan in Fake Recruiting Attack
Photo: TokenPost
Binance’s preliminary investigation found that a fake hiring process planted a zero-day trojan on an engineer’s work computer before the theft on Thursday, Oct. 29, which affected about $6.3 billion in assets. Binance said a software engineer was contacted in September through a legitimate job platform by someone posing as a project director. The engineer completed a fake human resources video interview and a second round with someone posing as a CEO. The engineer then received a coding assignment to download onto a work computer. Its repository contained a trojan that bypassed endpoint protections, Binance said.
Source: TokenPost
