Binance oo sheegtay in hackayaal Kuuriyada Waqooyi ah ay xadeen $6.3 bilyan iyagoo isku dayay shaqo-abuur been ah
Binance ayaa sheegtay in weerarka uu socday bilo, isla markaana uu ku qasbay in ay joojiso lacag-bixinta macaamiisha.
Binance ayaa sheegtay in hackayaal loo aaneeyay Kuuriyada Waqooyi ay xadeen $6.3 bilyan oo crypto ah toddobaadkii hore, iyagoo isticmaalayay profile-yaal been abuur ah oo baraha bulshada ah iyo bixinta shaqo si ay u khiyaameeyaan injineer ka tirsan shirkadda.
Sida weerarka loo abaabulay
Binance ayaa sheegtay in hackayaasha, oo isku ekaysiiyay shaqo-qorayaal, ay la xiriireen injineer software ka shaqeeya wallet-ka shirkadda. Ka dib laba wareysi oo lala yeeshay shirkadda la sheegay, injineerka waxaa lagu amray in uu soo dejiyo hawlo koodh ah oo qayb ka ah habka wareysiga. Markii la furay, hawshaas waxaa ku jiray koodh xun oo waxyeelleeyay laptop-ka shaqada ee injineerka.
Sida hackayaashu uga gudbeen difaaca Binance
Binance ayaa sheegtay in qalabkeeda ammaanku uusan ogaan koodhka xun. Meeshaas ay ka heleen shabakadda Binance waxay u ogolaatay hackayaasha in ay galaan qalab gudaha ah oo awood u leh in uu qabsado kombuyuutarrada laba injineer oo kale oo ka tirsan kooxda wallet-ka. Mid ka mid ah injineerradaas ayaa bilihii hore si aan ula kac ahayn u soo dejiyay app la beddelay oo ay ku jirtay malware dhicis ah oo xada passwords, ka dib markii uu ka raadiyay natiijooyinka mishiinka raadinta.
Awoodda lacagaha iyo jawaabta Binance
In kasta oo Binance ay beddeshay laptop-ka injineerkaas, hackayaashu waxay isticmaaleen aqoonsigiisa la xaday si ay u galaan kombuyuutarka injineer saddexaad, kaas oo shaqadiisu u ogolaatay in ay galaan nidaamyo maamuli kara bilyanno doolar oo crypto ah. Binance ayaa sheegtay in weerarka uusan ahayn mid ay ahayd in uu dhaco, waxayna sheegtay in ay hagaajisay ammaanka shabakadeeda. Shirkaddu waxay sheegtay in ay keeni doonto khubaro ammaan si ay u eegaan dhacdada.
The exchange says a wallet engineer was tricked into downloading malicious code, and that the attack "should not have happened."
Binance says North Korean hackers used fake social media profiles and a purported job offer in a months-long scheme that led an employee to download malicious software, allowing a record $6.3 billion crypto theft last week, the company confirmed.
How the hackers gained a foothold
Binance said hackers posing as recruiters contacted a software engineer who works on wallets at the company. After two interviews with the purported company, the engineer was told to download an apparent coding assignment as part of the interview process. When opened, the assignment contained malicious code that compromised the engineer's work-issued laptop, and Binance said its security tools did not detect the malware.
Access widened across the wallet team
The foothold let the hackers reach an internal tool capable of taking over the work computers of two other engineers on the wallet team. One of those engineers had unwittingly downloaded a tampered app containing password-stealing malware months earlier after searching for the software in search engine results. Binance replaced that engineer's laptop, but the hackers used the stolen credentials to break into the computer of a third engineer, whose job gave them access to systems capable of controlling billions of dollars in crypto.
Company response and wider warnings
Binance said the attack "should not have happened" and that it had improved its network security following the theft. The company said it would bring in cybersecurity experts to review the incident and has put new security measures in place to prevent a repeat. By Binance's own account, the company faced at least 57 suspected attacks from North Korea, which it said reflect the "persistent threat posed by state-sponsored actors targeting the cryptocurrency industry."
Ilaha iyo xuquuqda sawirka
Sawir: TechCrunch Xigasho
