allegation
The attacker most likely compromised a laptop belonging to a DevOps engineer, and through it reached a service inside the platform's systems and used it to send unauthorized withdrawal transactions.
A allegation by حسب الشركة. Statements are as reported by the cited publishers — not verified by DecisionGateway.
حسب الشركة، المهاجم تمكن على الأرجح من اختراق حاسوب محمول تابع لمهندس DevOps، ومن خلاله وصل إلى خدمة داخل أنظمة المنصة واستعملها لإرسال عمليات سحب غير مصرح بها.
Discussion
Related claims
Preparation for the attack lasted at least 36 hours and began with a compromised laptop of an exchange engineer.liganet · statementHackers moved billions stolen from Binance.gulfnewsuae · statementIn three of these campaigns, the common point was abuse of Microsoft's Device Code Authentication, a method by which an attacker, by deceiving the user, can gain access to their Microsoft 365 account without stealing a password and even while directly bypassing MFA.intsec · allegationThe platform temporarily suspended deposits and withdrawals to conduct security checks.المنصة · statementOn October 29, hackers stole 6.3 billion US dollars from Binance.Netizens · allegationThe cyberattack targeted supermarket refrigeration facilities in October.anadoluagency_en · statement