According to CoinMeta, Binance's Chief Security Officer Jimmy Su stated in July that fake job interviews could induce employees to run malicious code on company devices, leading to device control, credential theft, and the use of these credentials to penetrate internal networks. In September, a Binance software engineer downloaded malicious programming tasks onto his work computer during a fake interview, which became part of a multi-stage attack that resulted in a $63 million theft on October 6. Jimmy Su pointed out that attackers used seemingly normal technical assessment steps to bypass antivirus tools. Binance's investigation revealed that the installer of the malicious tasks used obfuscation techniques to evade endpoint security tools. Since the beginning of this year, Binance has intercepted 57 cyber threats suspected to be related to North Korea. After the attack in October, Binance strengthened device and access controls, reinstalled affected wallet systems and internal AI tools, and increased investments in endpoint protection and security for development environments.