todays adexchanger had a lolworthy note that the binance hack began with a search ad.
If you hadn’t heard, Binance was totally pwned in a $6 billion crypto heist last week, suspected to be a North Korean operation. Well, Binance has now published what amounts to a preliminary autopsy report of the incident.
The heist began when a Binance Wallet DevOps team member accidentally downloaded a malicious copy of Homebrew – a popular open-source tool – from a mirror site promoted in a search ad. The malware was spotted, but not before the hackers had obtained the real identities of Wallet DevOps team members.
Using those identities, the North Korean hacking unit spent months targeting Binance’s wallet team with covert schemes. One involved a prolonged fake job interview that lured a Binance DevOps engineer into downloading an “assignment” onto their work device.
After taking control of the Binance DevOps engineer’s laptop, the hacker used an unnamed internal AI tool to log in to the devices of other engineers. Access to multiple credentials allowed the heist to go through.
Binance guy fell for "top link is ads". COME ON.
Never understood why my employer would drop $30m on Crowdstrike but not add uBlock Origin to their company chrome profile for free.