International
The Morning Dev

Only the news worth knowing

‹
 

Security · High impactFan score 45 · Tier B2 sources

The Take-Home Test That Runs on Your Work Laptop: Inside the AccuraSoftHire Fake Interview Campaign

StepSecurity Blog ·

The Take-Home Test That Runs on Your Work Laptop: Inside the AccuraSoftHire Fake Interview Campaign

The Brief · written from 2 sources

  • Binance says its $6.34 billion theft began when an engineer ran a fake interview assignment on his work computer.
  • Dark Reading reports the attackers targeted a known weakness and missing controls, and that attacker-deployed sweepers hobble controls meant to limit damage from an exchange compromise.
  • JFrog has exposed a fake company, AccuraSoftHire, built to run the same fake-interview trick.

Why it matters

Take-home coding assignments from unknown recruiters can run malicious code on a developer's work machine, so they can be an entry point into company systems and crypto assets.

Who’s affected

  • Developers who run take-home assignments on work computers
  • Crypto exchange engineering and security teams

Binance says its $6.34 billion theft began when an engineer ran a fake interview assignment on his work computer. JFrog has now exposed a fake company, AccuraSoftHire, built to run the same trick. We decoded the attacker's server history from a public Ethereum wallet and found…

Timeline

  1. darkreading

    Attackers in Binance Breach Targeted Known Weakness, Missing Controls

  2. Step Security Blog

    The Take-Home Test That Runs on Your Work Laptop: Inside the AccuraSoftHire Fake Interview Campaign

Full coverage · 2 sources

How do you feel about this?

0 Comments

    The Take-Home Test That Runs on Your Work Laptop: Inside the AccuraSoftHire Fake Interview Campaign – The Morning Dev