A fake job interview and malicious software reportedly helped attackers reach Binance engineers before the roughly $6.3 billion crypto theft. Tom, Scott, and Kevin discuss endpoint trust, developer access, transaction controls, and incident response when every minute matters.
This episode focuses on the practical controls that limit damage after prevention fails: separate approvals, transaction policy, fast containment, and better handling of untrusted interview code.
Special thanks to Guardsquare for sponsoring this episode! Guardsquare is the leader in mobile application security, with multi-layered protection for your Android and iOS apps. Learn more at Guardsquare.com.
** Links mentioned on the show **
Reuters — Binance says hackers used fake job interview to compromise computers before $6.3B attack https://www.reuters.com/world/binance-says-hackers-used-fake-job-interview-compromise-computer-before-63-2026-11-03/
FBI IC3 — North Korea targeting the crypto industry with social engineering https://www.ic3.gov/PSA/2024/PSA240903
CISA/FBI/Treasury — TraderTraitor targets blockchain companies https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-108a
Chainalysis — The $6.4 Billion Binance Hack: Tracing the North Korea Link https://www.chainalysis.com/blog/binance-exploit-latest-findings-and-response/
** Watch this episode on YouTube **
** Become a Shared Security Supporter **
Get exclusive access to bonus episodes, listen to new episodes before they are released, receive a monthly shout-out on the show, and get a discount code for 15% off merch at the Shared Security store. Become a supporter today by going to our YouTube channel's membership section: https://www.youtube.com/channel/UCg9CCDIYkDDqwEZ3UYaxjnA/join
** Thank you to our sponsors! **
SLNT
Visit https://www.slnt.com/sharedsec to receive 10% off SLNT's amazing line of Faraday bags and other products built to protect your privacy.
** Subscribe and follow the podcast **
Subscribe on YouTube: https://www.youtube.com/c/SharedSecurityPodcast
Follow us on Bluesky: https://bsky.app/profile/sharedsecurity.bsky.social
Follow us on Mastodon: https://infosec.exchange/@sharedsecurity
Join us on Reddit: https://www.reddit.com/r/SharedSecurityShow/
Visit our website: https://sharedsecurity.net
Subscribe on your favorite podcast app: https://sharedsecurity.net/subscribe
Sign-up for our email newsletter to receive updates about the podcast, contest announcements, and special offers from our sponsors: https://shared-security.beehiiv.com/subscribe
Leave us a rating and review: https://ratethispodcast.com/sharedsecurity
Contact us: https://sharedsecurity.net/contact
