#BinanceEarnYieldArena
Binance Blog published a new article, addressing concerns about recent reports of Binance user credentials appearing on the dark web. The article clarifies that these incidents are not due to a breach of Binance systems but are instead linked to malware-infected devices. This type of malware, known as InfoStealer, is increasingly targeting browser-stored credentials across various industries, including cryptocurrency. Binance emphasizes the importance of user vigilance, as the company actively monitors such incidents, notifies affected users, and assists them in securing their accounts.
In recent days, claims have emerged suggesting a potential data breach at Binance, based on the appearance of user credentials on dark web forums. However, Binance's internal investigations have found no evidence of any compromise within its systems. The credentials in question appear to have been harvested from malware infections on individual user devices. These infections are carried out by actors operating in dark web markets, using InfoStealers to extract data from compromised browsers. Binance's security team continuously monitors dark web sources and malware campaigns to identify potential threats. When credentials linked to Binance accounts are detected, the company takes immediate action, including initiating password resets, revoking active sessions, and guiding affected users through account recovery.
The threat of InfoStealer malware extends beyond crypto platforms, posing a broader cybersecurity challenge. According to Kaspersky, over 2 million bank card details were leaked last year due to these malware campaigns, and the number continues to grow. Binance's internal data reflects this trend, showing a significant increase in the number of users whose credentials or session data have been compromised by InfoStealer infections. These infections typically affect personal devices where credentials are saved in browsers or auto-filled into websites, rather than originating from Binance itself.
