Binance 黑客攻击时间线：攻击者入侵三名工程师并访问钱包签名服务
Binance Hack Timeline: How Attackers Compromised Three Engineers to Access Wallet Signing Service WuBlockchain mapped the attack timeline based on Binance’s preliminary investigation. In June, Wallet DevOps Engineer A downloaded a tampered Homebrew installer while setting up an AI coding tool. Although Binance detected the incident, replaced the device and rotated credentials, information about the engineer and colleagues was exposed. In September, Engineer B downloaded a malicious code repository during a fake job interview, compromising his work computer. On October 20, attackers used the compromised device and an internal AI tool to gain control over Engineers A and C, discovering a container deployment permission token on A’s computer. On October 29, they accessed C’s computer, used credentials stolen from A to deploy a container and execute a malicious script, and ultimately initiated unauthorized asset transfers through Binance’s internal wallet signing service.
WuBlockchain 根据 Binance 的初步调查梳理攻击时间线，攻击者入侵三名工程师的设备，最终通过内部钱包签名服务发起未经授权的资产转移。6 月，工程师 A 下载被篡改的 Homebrew 安装程序，Binance 检测到事件后更换设备并轮换凭证，但 A 及其同事的信息已泄露；9 月，工程师 B 在虚假招聘面试中下载恶意代码仓库，工作电脑遭入侵。
同一件事，精选收录的是《币安初步调查：攻击者入侵员工设备并获取钱包签名权限》
来源：WuBlockchain · x.com