慢雾 Founder 余弦 Calls Binance Breach an APT-Style Cyberattack

慢雾 founder 余弦 characterized the theft process disclosed by Binance as an advanced persistent threat (APT) attack, urging individuals and businesses to check for exposure to similar poisoning tactics.

Binance’s hot wallets were compromised Oct. 29, and the exchange estimated losses at $6.3 billion. 余弦 cautioned against viewing the incident only as an engineer’s mistake or a problem of excessive permissions. The warning follows earlier coverage of additional breach points tied to Binance’s $6.3 billion attack.

He described a possible chain involving reconnaissance, social engineering, malicious code designed to evade detection, exploitation of trusted systems, lateral poisoning, cloud intrusion and risk-control bypasses. Zero-day vulnerabilities may also be part of an attack chain.

余弦 urged people to assess whether they, their colleagues or employees could be vulnerable to similar poisoning tactics and to strengthen defenses. He said social engineering may be only one stage of a larger intrusion, and a seemingly simple tactic can cause serious harm in a particular environment.