Binance blocks North Korea-linked cyberattacks, no asset losses reported

Binance: Binance is a major global cryptocurrency exchange that provides trading, custody, and related services for digital assets. Its security team identified and blocked multiple North Korea-linked cyberattacks over the past week with no impact to systems or assets. The exchange is actively strengthening threat detection and internal controls against ongoing social engineering efforts. North Korea-linked hacking groups: North Korea-linked hacking groups are state-associated cyber actors that target cryptocurrency platforms and users through sophisticated operations. They have continued the “Contagious Interview” campaign, which relies on fake job interviews, coding tests, and requests to install malicious software. These groups carried out the recent attacks on Binance that were successfully mitigated. User Advisory: Binance recommends that users avoid installing unauthorized software or running code from untrusted sources to reduce infection risks. Campaign Tactics: The Contagious Interview campaign involves fake job interviews and unauthorized software installation requests to deliver malware to targets. Security Response: Binance has enhanced its security monitoring, threat detection capabilities, and internal controls to counter persistent social engineering threats.