In Other News · United States

Source: Axios

North Korea appears to have used a fake job interview as part of its months-long preparations to steal $6.3 billion from Binance, the crypto exchange said Tuesday.Why it matters: The country's hackers are weaponizing both sides of the job market, posing as recruiters and job applicants to infiltrate companies and steal billions.Driving the news: Binance said one of its software engineers was contacted in September through a "legitimate job-hunting platform" by someone posing as a project director at a fictitious company.During the first-round interview, a fake HR representative conducted a live video call with the engineer and showed off a seemingly legitimate social media profile featuring personal photos and videos.The hackers waited until the second round — after building trust with the employee — to ask them to download an infected code repository as part of an interview assignment.Separately, another software engineer also downloaded a "tampered Homebrew installation" in June to install a popular AI coding tool onto their device. Binance's security team detected the installation and replaced the device, as well as rotated all credentials, but the engineer and colleagues were all exposed to the hacker. The intrigue: The fake interview was just one of several suspected North Korean...