i was wrong, Binance hack wasn't Cursor vuln - it was a much longer op
0 Boosts
0 Likes
@pndc i ran separate work and personal laptops just for mental hygiene and was immediately happier
@davidgerard Soo.. Did this one enggineer do a job interview and related assignments for another company on the Binance-company laptop (quite bold move i must say) or do they not have company devices and it was a private one, byod style? (Which would be even worse, considering the company we're talking about here)
Good old fashionsocial engineering ?
@davidgerard It was definitely one of those "too good to check" stories, so perhaps we should have expected it to turn out to not be true after all. Oh, well.
I was already aware of the malware-delivering headhunting scam as it's been used a few times before to get into sensitive systems. Developers' personal laptops usually have terrible security (it gets in the way when hacking at stuff) and yet these machines also often have privileged access to their employers' systems. Supporting evidence: my personal kit until I got wise to the fact this is no longer a theoretical attack and started sandboxing.