In June, a wallet infrastructure engineer downloaded a modified Homebrew installer while installing an AI coding tool. Binance detected the intrusion, replaced the computer and reset credentials, but attackers obtained information about employee responsibilities.
In September, another engineer encountered a supposed recruiter on an employment platform. After video interviews with individuals impersonating company executives, the employee downloaded a coding assignment containing malware.
Binance said that the malicious repository bypassed endpoint protection and connected the computer to attacker-controlled infrastructure.
