North Korean fake job interview led to $6.3B Binance heist

North Korean hackers orchestrated a sophisticated $6.3 billion theft from Binance in October 2026 using a multi-stage campaign that included a fake job interview to trick a software engineer into downloading malware onto his work computer. The attack, attributed to the North Korean group TraderTraitor linked to Lazarus Group, also involved a supply chain attack, compromised internal AI tools, and advanced transaction authorization methods. Binance emphasized this was not a simple breach or phishing incident, but rather a coordinated, advanced social engineering and technical attack.