Wu summarized the complete timeline of the attack based on Binance's preliminary investigation report: In June, wallet operations engineer A downloaded a tampered Homebrew installer to install AI programming tools. Although the security team discovered the anomaly and replaced the device and rotated credentials, his position and the information of his colleagues were already exposed. In September, software engineer B was tricked into downloading a code repository containing malicious code during a fake job interview, resulting in the compromise of his work computer. On October 20, the attacker used B's compromised computer and internal AI tools to further control engineers A and C, and discovered a container deployment permission token on A's computer. On October 29, the attacker logged into C's computer, used credentials stolen from A to deploy a container and execute a malicious script, and then transferred assets through unauthorized access to the internal wallet signing service. https://(wublock123.com)/news/binance-hack-diagram-north-korean-hackers-compromised-wallet-signing-service-71265