A malicious search ad appears to have helped trigger Binance’s $6.3 billion hack, which is currently (and dubiously) the largest cryptocurrency theft in history.
Today, Binance released its initial, detailed findings on the October 29 attack, which the FBI has attributed to North Korean hackers. The attackers spent months infiltrating Binance’s systems before stealing billions in cryptocurrency.
Why This Matters
According to Binance, in June, an engineer downloaded a compromised version of Homebrew, a popular Mac developer tool, after clicking a malicious Google Search ad. That ultimately exposed the engineer’s wider team and set the stage for the attack that followed.
See this image of a similar ad:
The Binance incident comes amid growing scrutiny of malvertising across the digital ad ecosystem.
Just last month, researchers at Citizen Lab revealed that Israeli advertising agency Discover-Tech had distributed surveillance-related ads across more than 120,000 websites and 75,000 apps, potentially reaching hundreds of millions of people.
This isn’t just an open web issue, either. Meta has also faced scrutiny this year over the prevalence of scam ads across its platforms.
Experts React
The fact that a scam ad likely triggered a historic heist hasn’t been lost on folks:
Our Take
Regulation will likely need to play a role in curbing malvertising and scam ads. Platforms simply aren’t doing enough.
AI is only exacerbating the issue, making it easier to create and distribute malware disguised as legitimate ads.
And now, a malicious search ad appears to have helped trigger one of the largest financial heists in history.
