Binance says fake job interviews, AI tool used in US$6 bln theft blamed on N. Korea

This will let Google show Yonhap news articles that match or are related to your search

WASHINGTON, Nov. 3 (Yonhap) -- Binance, the world's largest cryptocurrency exchange, said Tuesday that hackers used fake job interviews and an internal artificial intelligence (AI) tool in a cyberattack that resulted in the theft of more than US$6 billion in digital assets last week.

The U.S. Federal Bureau of Investigation's (FBI) has attributed the theft to North Korea, identifying the incident to a North Korean hacking group it calls TraderTraitor, a name previously tied to other cryptocurrency thefts.

In its latest findings, Binance said approximately $6.34 billion in digital assets were affected by a multi-stage operation that involved fake interviews and internal AI tool and suspected of being carried out as early as June.

"In September, a fake recruiter on a job platform ran video interviews and sent an 'assignment' repository carrying 0-day malware undetected by endpoint tools," the exchange said in a report.

According to Binance, the attacker used an internal AI tool on Oct. 20 as a springboard to reach a container deployment token and later deployed a container to trigger the attack.

Binance said it blocked 57 suspected North Korea-linked threats this year.

On Tuesday (Korean time), Kim Yo-jong, the powerful sister of North Korean leader Kim Jong-un, flatly dismissed the findings of the FBI, calling it a "grave political provocation" against Pyongyang.

The U.S. State Department reiterated concerns over North Korea's use of cybercrime to finance its weapons programs.

"The issue of DPRK cybercrime is a global problem that touches companies and jurisdictions around the world, including the United States," a U.S. State Department spokesman told Yonhap News Agency, referring to North Korea's official name, the Democratic People's Republic of Korea, when asked about the department's position regarding the North's latest claim.

The logo of Binance and hacker code are seen in this illustration produced by Reuters. (PHOTO NOT FOR SALE) (Yonhap)

odissy@yna.co.kr (END)

U.S. reiterates concerns over N. Korean cybercrime following Kim Yo-jong's denial of Binance theft

Lee orders review for establishment of cybersecurity task force

(2nd LD) N. Korean leader's sister blasts FBI's crypto theft probe as 'political provocation'

Binance says fake job interviews, AI tool used in US$6 bln theft blamed on N. Korea

这将使谷歌能够向您展示与您的搜索匹配或相关的韩联社新闻文章。

华盛顿，11月3日（韩联社）——全球最大的加密货币交易所币安周二表示，黑客利用虚假求职面试和内部人工智能（AI）工具发动网络攻击，导致上周超过60亿美元的数字资产被盗。

美国联邦调查局（FBI）将此次盗窃事件归咎于朝鲜，并认定该事件与一个名为 TraderTraitor 的朝鲜黑客组织有关，该组织此前曾与其他加密货币盗窃案有关。

币安在其最新调查结果中表示，约有 63.4 亿美元的数字资产受到多阶段攻击的影响，该攻击涉及虚假面试和内部人工智能工具，并被怀疑早在 6 月份就已实施。

该交易所在一份报告中称：“9 月份，一名虚假招聘人员在求职平台上进行视频面试，并发送了一个‘任务’库，其中携带了终端工具无法检测到的零日恶意软件。”

据币安称，攻击者于 10 月 20 日使用内部 AI 工具作为跳板，获取了容器部署代币，随后部署了一个容器来触发攻击。

币安表示，今年已拦截了 57 个疑似与朝鲜有关的威胁。

周二（韩国时间），朝鲜领导人金正恩的妹妹金与正断然否认了美国联邦调查局的调查结果，称其为对平壤的“严重政治挑衅”。

美国国务院重申了对朝鲜利用网络犯罪为其武器计划筹集资金的担忧。

美国国务院发言人告诉韩联社：“朝鲜网络犯罪问题是一个全球性问题，它影响到世界各地的公司和司法管辖区，包括美国。”当被问及国务院对朝鲜最新指控的立场时，他指的是朝鲜的正式名称——朝鲜民主主义人民共和国。

这张由路透社制作的插图显示了币安的标志和黑客代码。（图片非卖品）（韩联社）

odissy@yna.co.kr (完)

在金与正否认币安账户被盗事件后，美国重申对朝鲜网络犯罪的担忧。

李下令审查成立网络安全工作组的事宜。

（第二条）朝鲜领导人的妹妹抨击FBI对加密货币盗窃案的调查是“政治挑衅”

币安称，涉案金额高达60亿美元的盗窃案与朝鲜有关，该案涉及虚假求职面试和人工智能工具。