The preliminary report on the $6.3 billion Binance hack (@binancezh) is out. It's another social engineering infiltration incident. It started with Engineer B using the company computer for a job interview, even downloading third-party code. Will their performance reviews ever end? Details of the theft: In June, Wallet operations engineer A searched for AI programming tools and downloaded a tampered Homebrew, exposing team information. In September, Engineer B was interviewed by a fake recruiter. The interview consisted of a live video interview with an HR representative and a fake CEO, culminating in him running a "coding challenge" on his work computer. A malware secretly replaced pyenv. On October 20th, the hacker, starting from B's computer, used Binance's internal AI tools to control the computers of Wallet engineers A and C. On October 29th, the hacker logged into C's computer, used A's deployment privileges to access the signature service, and the coins in the hot wallet were transferred out. North Korean hackers are truly ubiquitous! From now on, when exchange employees go for interviews, will the interviewer have to say that Kim Jong-un is a **?