Security Alliance estimates that the North Korea-linked TraderTraitor group gained access to Binance systems about eight weeks before the $6.3 billion exploit on October 29. The intruders reportedly began their infiltration in September and operated with a high degree of stealth over several weeks. Security Alliance identified similar patterns in the Bitget, LayerZero, Kelp DAO and AFX attacks, with estimated access periods of six, six, three and three weeks, respectively. Binance attributes the intrusion to a fake job interview that compromised an employee’s device and enabled the theft of credentials used to breach its wallet infrastructure. The US Federal Bureau of Investigation linked the attack to TraderTraitor, while Kim Yo Jong rejected the allegations.
Source: Read the original article
