A fake job interview and a counterfeit Mac tool likely opened the door to the record $6.3 billion Binance hack, a security researcher explains.
A fake job interview likely helped attackers get into an engineer's Mac before the record $6.3 billion Binance hack. That is the picture in a new episode of the Security Bite Podcast from 9to5Mac, which covers new details of the case.
The guest is Christopher Lopez, a longtime macOS security researcher and reverse engineer. A reverse engineer is someone who takes apart software to learn how it works.
Two pieces stand out. Attackers used a fake copy of Homebrew, a popular tool for installing Mac software. Separately, a fake job interview led them inside the engineer's Mac. Together, they show how a trusted-looking tool and a believable invitation can be used to get past a careful person.
The material does not say when the attack happened, how the money was taken or who was behind it. It also does not spell out how the fake interview and the fake Homebrew fit together step by step. The word "likely" matters here. This is the episode's account of the case, not a final official finding.
If an interviewer asks you to install software, stop, and only download tools from their official source.
Security researchers found over a thousand Claude Code settings files on GitHub holding real passwords and keys. Teams that use the tool should check now.
Read more: A time-saving Claude Code button can leak passwords onto public websitesAirPods read iMessage reactions aloud, and Apple offers no way to silence just those. The only fix today is muting all message announcements, which risks missing real texts.
Read more: Apple has no way to mute emoji reaction alerts in AirPodsiToolab says its RecoverGo tool can pull single items from an iCloud backup without wiping your iPhone, but the claim is untested and needs your Apple ID.
Read more: A Third-Party Tool Claims It Can Restore Some iPhone Data Without a Reset
