In a recent disclosure, Binance has unveiled the intricate methods employed by hackers in the unprecedented $6 billion breach of its cryptocurrency platform. The investigation, released on November 3, highlights how the attackers utilized fake job interviews and malicious software to execute one of the largest thefts in the history of cryptocurrency.

The attack, which took place over a span of four hours on October 29, was attributed to hackers linked to North Korea, as stated by the US Federal Bureau of Investigation (FBI). However, the North Korean government has dismissed these claims, with Kim Yo-jong, the sister of leader Kim Jong Un, labeling the allegations as “absurd rhetoric.”

Binance reported that it has successfully replenished 98 percent of the stolen assets, utilizing its own funds to do so. The remaining funds, amounting to approximately $340 million, involve lesser-known cryptocurrencies that are more challenging to retrieve. The hack has significantly impacted the cryptocurrency market, causing a sharp decline in the prices of major digital currencies.

The investigation revealed that the hackers began their infiltration as early as June, targeting a Binance platform engineer. They tricked the engineer into downloading a compromised version of Homebrew, a popular programming tool. Although Binance’s cybersecurity team managed to detect and eliminate the malware, the attackers had already gathered critical information about the engineer and his colleagues.

In September, the hackers escalated their efforts by approaching another Binance engineer through a legitimate job-search platform. They fabricated a job interview for a non-existent position, establishing trust with the engineer by sharing social media content. During this process, the engineer was asked to download a test exercise that contained malware designed to bypass security measures. This malware was pivotal in facilitating the hackers' access to Binance’s internal systems.

On October 20, leveraging the access gained, the attackers utilized an internal AI tool to gain control over software used by two other engineers. Just nine days later, they executed the malicious code that initiated the attack, leading to the massive theft.

As the largest cryptocurrency exchange by daily trading volume, Binance's breach underscores the vulnerabilities that exist within the digital currency sector. The company has reported that about $2.85 billion of the stolen funds have been frozen, preventing the hackers from liquidating or converting the assets into other currencies. This incident not only raises concerns about cybersecurity in the cryptocurrency space but also highlights the sophisticated tactics employed by cybercriminals in their operations.