Last week, news broke that hackers had stolen $6.3 billion from wallets on Binance, the most popular cryptocurrency exchange in the world. The company was able to freeze about nearly $3 billion of it, but the attack quickly made headlines as the largest financial heist in human history. At the time, security researcher Christopher Lopez and others suspected the heist could have started on a Mac, citing the popular use of Apple devices among DevOps engineers and crypto enthusiasts. Yesterday, Binance published a more detailed breakdown of the attack. The malware targeted /opt/homebrew, the default directory for Homebrew on macOS, confirming the initial suspicion. No sophisticated zero-day exploit was used; instead, hackers relied on the same old social engineering tricks. The attack began with a fake Homebrew installation on a Mac, leveraging social engineering to compromise the system. This method mirrors last year's $1.5 billion Bybit heist, which also began on a developer's Mac, highlighting a recurring vulnerability in the crypto community.
Mosyle, the only Apple Unified Platform, is exclusively bringing this Security Bite. Trusted by over 45,000 organizations, Mosyle combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. Request your EXTENDED TRIAL today to understand why Mosyle is everything you need to work with Apple.
Source: 9to5Mac · Summarized by HeadlinesBriefing