A Fake Job Interview and a Swapped pyenv Opened Binance’s Vault
ReversingLabs maps Binance's disclosed intrusion chain, from a fake job interview that trojanized pyenv to a container that reached the signing service, and profiles TraderTraitor's FLATROOF Terraform lure with published Sigma and YARA.