FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance
US Seizes $1.2B in Crypto Stolen from Binance; North Korea Blamed for Separate $400M Theft
The FBI announced the seizure of over $1.2 billion in cryptocurrency stolen from Binance last month, a heist previously attributed to North Korean hacking group TraderTraitor. The U.S. government has now frozen over $2.7 billion of the stolen funds. Separately, the FBI blamed North Korea for a social engineering scheme called FaceStealer, which resulted in the theft of $400 million over 18 months.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Binance?
Get an email when a new story names Binance, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonThe TraderTraitor group, linked to North Korea, used sophisticated social engineering (FaceStealer) to compromise Binance and steal over $1.2 billion in cryptocurrency, with total frozen funds exceeding $2.7 billion. The root cause lies in human manipulation — attackers deceived employees or insiders into granting access or credentials rather than exploiting a software vulnerability. This matters because even technically hardened platforms can be undone by a single employee falling for a targeted phishing or impersonation attack. The scale of the theft underscores how nation-state actors invest heavily in social engineering as a primary intrusion vector against high-value financial targets.
What helps against this
How we list vendors- Privileged access management (PAM)
Admin accounts stop being one stolen password away from control of everything.
- Identity threat detection and response (ITDR)
Attackers who log in with real, stolen credentials get noticed.
- Encryption and key management
Stolen data stays unreadable, and the keys stay under your control.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — FaceStealer
- malware — TraderTraitor