# North Korean fake job interview led to $6.3B Binance heist - HackerByte page: - Original source: - Hacker News discussion: - Submitted to Hacker News: 2026-11-04T14:09:55.000Z Cybercriminals stole a large sum of money from a cryptocurrency exchange using a tactic linked to North Korea. ## AI-generated summary North Korean hackers successfully executed a $6.3 billion heist against Binance by exploiting a software engineer through a sophisticated, multi\-stage attack. The campaign involved a fake job interview to trick the engineer into downloading malware, which subsequently compromised internal AI tooling and allowed for an advanced transaction\-authorization method to steal the funds. ## Key points - North Korean hackers, linked to Lazarus Group, orchestrated the $6.3 billion Binance heist. - A fake job interview was used as social engineering to trick a Binance engineer into downloading malware. - The malware compromised internal AI tooling and allowed attackers to gain unauthorized access. - The attack was a sophisticated, multi\-stage campaign, not a simple phishing incident. - Binance has rebuilt compromised systems, is working with law enforcement, and plans to establish an AI security research fund.