Binance's Chief Security Officer exposes North Korean hackers using AI to fabricate identities and infiltrate daily.



According to news from Hash World, Binance's Chief Security Officer Jimmy Su revealed that North Korean hackers are impersonating job seekers every day in an attempt to infiltrate companies, posing a significant threat in the cryptocurrency field, particularly as the North Korean-linked Lazarus organization becomes increasingly rampant. Last year, North Korean hackers stole $1.34 billion, and this year they have already stolen $1.6 billion. They use AI technology to fabricate identities, gain trust through voice modulation and deepfake videos, and attack employees' devices by contaminating public code repositories and spoofing recruitment links. Binance screens suspected resumes daily, which often follow specific templates, with applicants frequently using common Japanese or Chinese surnames. Advances in AI technology enable hackers to disguise themselves as European or Middle Eastern developers and utilize voice changers and disguise techniques during interviews. However, slow internet connections have become a major clue for identification. Additionally, Binance requires applicants to perform certain actions during interviews to break their disguise, though the specific methods have not been disclosed. To prevent internal infiltration, Binance also monitors employee behavior, such as work hours and output. If an employee's performance indicates consistent overwork, it may suggest they are members of the Lazarus organization. North Korean hackers also attack the cryptocurrency industry by contaminating public code repositories or fabricating job invitations. Su emphasized that the methods of attack are becoming increasingly complex, posing serious threats to the industry.