Binance Security Chief Warned of Fake Interview Risks Before October Attack

Binance Chief Security Officer Jimmy Su warned in July that fake job interviews could lead employees to run malicious code, months before Binance linked a similar incident to its October theft.

In September, a Binance software engineer downloaded a malicious coding assignment onto a work computer during a fake interview. Binance’s preliminary investigation linked the incident to one part of the multistage attack behind the October theft.

Su also warned that attackers could use routine-looking technical-assessment steps to bypass antivirus tools. Binance’s later investigation found the assignment installer used obfuscation and other methods to evade endpoint security tools.

Binance said it had blocked 57 suspected cyber threats linked to North Korea so far in 2026, about one every five days. After the October attack, the company said it strengthened device and access controls, rebuilt affected wallet systems and internal AI tools, and increased investment in endpoint protection and development environment security.