Binance has disclosedfurther details of a $6.3billion cyberattack that involved fake job interviews, malicious softwareand an internal artificial intelligence tool. The exchange said the campaignbegan in June and ended with the theft of digital assets in October.London's trading industry is coming home!According to anincident report published today (Tuesday), attackers initially compromised anengineer's computer through a tampered version of Homebrew, a software packagemanager. The employee had downloaded it after clicking an online advertisementwhile searching for an AI coding tool.Hackers Exploited Employee Devices andInternal AIBinance detected thesuspicious activity, replaced the employee's device and changed the affectedcredentials. However, the attackers had already gathered information about theengineer and other members of the wallet development team.In September, thehackers approached another engineer through a job-hunting platform. They posedas representatives of a fictitious company and arranged interviews withindividuals claiming to be its executives. During the process, the engineerreceived a coding assignment containing malicious software.The compromiseddevices provided further access to Binance's internal systems. On October 20,the attackers used an internal AI tool and information from the compromisedcomputers to access the systems of two wallet developers.Binance Hot Wallets Drained AcrossMultiple BlockchainsThe attack escalatedon October 29, when the hackers used stolen credentials to deploy a containerand run a malicious script. They exploited Ethereum's mechanism to obtainexecution permissions over a Binance hot wallet, allowing them to initiateunauthorised transactions.The attackers firstmoved approximately 233 million XRP from five internet-connected wallets. Theythen targeted wallets across multiple blockchains, stealing approximately $6.3billion in digital assets.FBI AttributesAttack to North KoreaThe FBI attributed theattack toTraderTraitor, a hacking group linked to North Korea. The group haspreviously been associated with major cryptocurrency thefts, including the $1.5billion Bybit hack in February 2025.North Korea deniedinvolvement. Kim Yo Jong, the sister of North Korean leader Kim Jong Un,described the FBI's attribution as a political provocation.Binance said itdetected and blocked 57 suspected North Korea-linked cyberattacks in 2026. Manyinvolved fraudulent recruitment approaches and malicious software.This article was written by Tareq Sikder at www.financemagnates.com.