The F.B.I. said on Saturday that North Korea was responsible for the hacking attack on Binance this week, the first official acknowledgment of the regime’s role in the biggest crypto heist in history.
Poor, isolated and heavily sanctioned, North Korea is not a country you would expect to field an elite army of hackers capable of pulling off billion-dollar heists. But for years, security officials had warned that the regime’s cyberattacks were becoming increasingly sophisticated, looting enormous sums to support North Korea’s military and nuclear-weapons program.
I mean…
With all that’s been known about supply chain attacks and social engineering, targeting especially dev devices…
Why the fuck did that dev have prod credentials laying around readable from the user account?
This is kinda on them. Company handling billions and billions, can’t be arsed to do baseline opsec?
I mean these are basics, even more so considering agentic coding is a thing now. Y’all just letting remote stochastic generators execute code, (and npm packages, vscode extensions) scrape your hard drive? At least put it in a rootless container, mount your repo, and remove all permissions beyond only the files currently being worked on. And ffs, set up a proper firewall.
We take those things for granted for sure. But the sad reality is that nowadays things go so fast that there’s no time to slow down and implement routines around some api that might not be the same way tomorrow.
… nor their last
I don’t mind if N Korea steals. It’s no worse than our own Gov, honestly. Just a different means of theft.
Good for them
