SlowMist Founder: Binance Breach Was an APT Attack, Not Just Engineers' Elementary Mistakes

TechFlow, November 04: SlowMist founder Yu Xian (@evilcos) posted on X that after reading Binance's disclosure of the theft, many people believed the engineer involved made elementary mistakes and had excessive permissions. However, such incidents are advanced persistent threat (APT) attacks, involving multiple stages such as human exploitation, intelligence reconnaissance, malicious code evasion, trust chain exploitation, targeted lateral poisoning, cloud environment penetration, risk control bypass, and 0day vulnerabilities; they cannot be assessed solely by the initial social engineering step.

Source: TechFlow