Attackers stole $6.34 billion from Binance using fake job interviews and compromised AI coding tools, prompting security guidance.
1 editorial report · 1 verified social mention. The most authoritative report leads while later evidence completes the story.
⚠️ After a fake job interview, $6.34 billion vanished. A security chief listed what to fix Binance says about $6.34 billion was taken on October 29 after attackers used fake job interviews and a tampered download of an AI coding tool to get onto engineers' laptops. A deployment token on one machine helped them reach the wallet signing service. That same stretch included a malicious Claude Code extension in Cursor that tried to install a persistent backdoor. Jack Cable, Cognition's head of security products, published a practical guide on November 3. Immediate steps he lists: • Passkeys or hardware keys on work accounts, not text-message codes • A password manager • An ad blocker, such as uBlock Origin • Scan laptops for leftover keys, and audit editor extensions, plugins and MCP servers • A 7-day minimum age before a new npm or PyPI package can be installed "AI makes attacks faster and cheaper, but it doesn't stop you from closing off entire, basic attack paths." @aipost 🏴
Open mention