Kugetjengwa kwe-Binance kwacala ngenkhulumiswano yemsebenti lengiyo ku-laptop yemsebenti: emabhiliyoni ema-dola langu-6.34, kanye nemitsetfo lengu-6 yemadivayisi enkampani yakho

Nangabe tisebenti takho tifuna umsebenti noma tetama tinhlelo letinsha kukhompyutha yemsebenti, lena yindlela ncamashi lokwadlula ngayo kwebiwa lokukhulu kakhulu emlandvweni wema-crypto. Nga-3 Novemba 2026, i-Binance yashicilela imiphumela yayo yekucala: kuhlasela lokwatsintsa cishe emabhiliyoni ema-dola langu-6.34 nga-29 Oktoba kwacala ngetinkhulumiswano temsebenti letimbili letingiyo nenjiniyela, kwaphela ngekuhlolwa kwekubhala ikhodi lakwehlisela ku-laptop yakhe yemsebenti. Sifundvo lesisebentako enkampanini yakho: kute emafayela labacashi bangaphandle kumadivayisi emsebenti, kute isofthiwe lengekho eluhlwini levunyelwe, futsi kute emalungelo lamakhulu kunalokudzingwa ngumsebenti. Nga-31 Oktoba sabhala ngekutsi ngubani longasusa imali yenkampani yakho ngaphandle kwesiginesha yakho; lesihloko simayelana nemnyango lowangena ngawo umhlaseli.

Kwentekeni, ngesinyatselo ngesinyatselo?

Ngekusho kwencazelo ye-Binance yeluphenyo lwayo lwekucala, kuhlasela kwadlula etigabeni letine:

• Juni 2026: lunjiniyela lwelicembu letikhwama, abefuna lithulusi lekubhala ikhodi le-AI, wehlisa sifaki se-Homebrew lesashintjwa lesinesofthiwe lenebungozi. Licembu lekuvikela lasibona, lashintja idivayisi futsi lavuselela imininingwane yakhe yekungena, kodvwa imininingwane ngaye nangalabasebenta nabo beseyivuzile.
• Septemba 2026: lotsite lobetishaya umcondzisi wemaphrojekthi watsintsa lunjiniyela lwesibili ngeplatfomu yemisebenti futsi wenta tinkhulumiswano letimbili: lucingo lwevidiyo nalotsiwa ummeleli wetisebenti, bese kuba nalowatsi ungumphatsi lomkhulu wenkampani lengekho. Enkhulumiswaneni yesibili watjelwa kutsi ehlise umsebenti wekubhala ikhodi kukhompyutha yakhe yemsebenti; ikhodi lenebungozi yasebenta ngesikhatsi sekufaka futsi emathulusi ekuvikela awazange ayibone.
• 20 Oktoba 2026: umhlaseli wasebentisa ikhompyutha lebeseyingenwe kanye nelithulusi le-AI langekhatsi le-Binance kute alawule tikhompyutha tabonjiniyela lababili labanye.
• 29 Oktoba 2026: emkhatsini wa-17:15 na-19:56 UTC umhlaseli wangena kukhompyutha yalunjiniyela lwesitsatfu ngemininingwane yekungena leyebiwa kulowekucala, wafaka i-container futsi wacala i-script lenebungozi; kudluliswa kwemali etikhwameni letishisako kwalandzela emkhatsini wa-20:05 na-20:09.

I-Binance itsi cishe emabhiliyoni ema-dola langu-2.85 amiswa noma avinjwa, kutsi nga-31 Oktoba beseyibuyisele 98% wemafa latsintsekile, nekutsi ngu-2026 yabona futsi yavimba timo letingu-57 tetinsongo lekusolwa kutsi tixhumene ne-North Korea. Ngamanye emagama, le-exchange yavimba imetamo leminyenti, bese iwa kulowunye.

Kungani inkhulumiswano lengiyo yaphumelela?

Ngobe ayifani nhlobo ne-imeyili ye-phishing. Lesisebenti asizange sichofote sixhumanisi lesisolisako lesivela kumtfumeli longatiwa; singene enchubeni yekucasha lebebukeka iliciniso: iplatfomu leyatiwako, inkhulumiswano yevidiyo, ummeleli wetisebenti lowabelana ngalokukhona ku-akhawunti yakhe yemuntfu siqu kute akhe kwetsembana, bese kuba ngumphatsi lomkhulu. Kwehlisa nekusebentisa iphrojekthi kuyincenye lejwayelekile yekuhlolwa kwabonjiniyela besofthiwe, ngako lesicelo asizange sibonakale singakajwayeleki.

Lelicebo alisilo lisha. I-TechCrunch iphawula kutsi umbiko we-CrowdStrike wabeka cishe ingcenye yekungena etinkampanini tebuchwepheshe taseMelika emnyakeni lophelile kubantfu base-North Korea labetishaya tisebenti te-IT letisebenta ekhashane noma bacashi. Lokucondziswe akusito ema-exchange ema-crypto kuphela, kodvwa nome ngubani lonekufinyelela etinhlelweni noma emalini.

Butsakatsaka besibili: isofthiwe leyehliswa emiphumeleni yekusesha

Lendzaba ayizange icale ngenkhulumiswano. Tinyanga letintsatfu ngaphambili, lomunye lunjiniyela wafaka isofthiwe leyashintjwa ngesikhatsi afuna lithulusi le-AI. Loku kwenteka onkhe malanga etinkampanini letinyenti: sisebenti siva ngelithulusi lelisha, silifune, sichofote umphumela wekucala, bese silifaka ngemalungelo e-admin. Sifundvo lesibaluleke kakhulu kutsi i-Binance yashintja idivayisi futsi yashintja emaphasiwedi, kodvwa imininingwane ngelicembu leyabe seyivuzile yasala esandleni somhlaseli, futsi wayisebentisa ngemuva kwetinyanga.

Imitsetfo lengu-6 yemadivayisi etisebenti takho kulelisontfo

• Kute emafayela ekucasha langaphandle kumadivayisi emsebenti: noma nguluphi luhlolo, iphrojekthi noma lifayela lelitfunyelwe ngulotsite wangaphandle livulwa emshinini lohlukene lote kufinyelela etinhlelweni tenkampani. Loku kuvumelana neselulekwe sangochwepheshe lesacashunwa yi-TechTarget: gcina ikhodi yetinkhulumiswano kudze nanoma ngumuphi umshini loseduze ne-production.
• Isofthiwe yeluhlu levunyelwe kuphela: susa emalungelo e-admin yendzawo etisebentini, futsi kufakwa kwenteke ngemphatsi wakho we-IT kusuka kuwebhusayithi lesemtsetfweni yalowenta isofthiwe, hhayi ngesikhangiso emiphumeleni yekusesha.
• Emalungelo lambalwa ngangekwenteka: loyo longasusa imali noma ashintje tinhlelo letibucayi ukwenta loko nge-akhawunti nangedivayisi lekhetsekile, hhayi ngemshini laphequlula ngawo i-inthanethi futsi etama ngawo emathulusi.
• Emalungelo lancane emathulusi e-AI langekhatsi: ku-Binance lithulusi le-AI langekhatsi laba yibhuloho emkhatsini wemadivayisi. Noma nguliphi lithulusi lelifinyelela kumadivayisi etisebenti noma etinhlelweni takho lidzinga emalungelo lamancane kanye ne-log yako konkhe lelikwentako.
• Kubona akusiko kuphela kwesehlakalo: nangabe idivayisi ingenwe, ungagcini ngekuyishintja. Cabanga kutsi lokukuyo kuvuzile, vuselela onkhe emaphasiwedi, tikhiya nema-token lahlobene nayo nelicembu layo, futsi ubuke ema-akhawunti alabasebenta nayo.
• Cecesha licembu lakho nge-phishing yetipho temsebenti: siphakamiso lesihehako lesicela kwehlisa lifayela noma kusebentisa ikhodi luphawu lwesecwayiso, futsi kufuna umsebenti ngedivayisi yemsebenti kubeka yonkhe inkampani engotini. Nangabe ucasha ekhashane, cinisekisa bunjalo balofaka sicelo ngaphambi kwekumnika noma nguyiphi imvume.

Tilawuli Letisisekelo Tekuvikeleka Kwe-inthanethi titsini?

Tilawuli Letisisekelo Tekuvikeleka Kwe-inthanethi ECC-2:2024 teLigunya Lavelonkhe Lekuvikeleka Kwe-inthanethi lase-Saudi Arabia (NCA) tibophelele etinhlanganweni tahulumende kanye netinhlanganweni letinengqalasizinda lebalulekile yavelonkhe, letiyisebentisako noma letiyiphetse, futsi i-NCA iyakhutsata kakhulu tonkhe letinye tinhlangano kutsi tisebentise. Letintsatfu tato tihambisana ngco nalesehlakalo:

• Silawuli 1-10-3: luhlelo lwekucwayisa lufaka ekhatsi kusebentisa i-imeyili ngekuphepha kanye ne-phishing, kuphequlula i-inthanethi kanye nekusebentisa tinkundla tetekuchumana.
• Silawuli 2-2-3-3: kunikwa emalungelo ngekuya ngesimiso sekudzinga kwati nekudzinga kusebentisa, emalungelo lambalwa kanye nekwehlukaniswa kwemisebenti.
• Silawuli 2-3-3-1: kuvikela emakhompyutha emsebenti nema-server kumagciwane, etinhlelweni letisolisako nakusofthiwe lenebungozi ngebuchwepheshe banamuhla.

Umbono we-Origami

Etinkampanini tase-Saudi sibona sifanekiso lesifanako lesawisa i-Binance: idivayisi yinye lesisebenti lesiyisebentisela umsebenti, kuphequlula, kufuna ematfuba nekwetama onkhe lithulusi lelisha, nemalungelo e-admin lagcwele ngobe kulula. Umhlaseli akadzingi butsakatsaka lobucindzetelako nangabe sisebenti sitawusebentisa lifayela ngekwaso.

Sixazululo akusiko kuvimba tisebenti kutsi tifunde noma tetame emathulusi e-AI, kodvwa kutivumela kutsi tiwetame endzaweni lengakhoni kufinyelela emalini nakudatha. Nasakhela emakhasimende etfu tinhlelo, sehlukanisa kusukela ekucaleni ema-akhawunti emalanga onkhe kuma-akhawunti lanemalungelo lakhetsekile, futsi sibhala konkhe kufinyelela kuwo.

Sicephetfo

Kungenwa lokungemabhiliyoni ema-dola langu-6.34 akuzange kucale ngebutsakatsaka be-server, kodvwa ngenkhulumiswano yemsebenti kanye ne-app leyehliswa ekuseshweni. Beka eceleni lihora kulelisontfo nemphatsi wakho we-IT: susa emalungelo e-admin yendzawo etisebentini, bhala luhlu lwesofthiwe levunyelwe, hlukanisa emadivayisi lanekufinyelela lokubucayi, futsi utjele licembu lakho kutsi kute lifayela lelivela kumcashi lelivulwa kudivayisi yemsebenti. Nangabe ufuna kubuyeketwa kwemalungelo etinhlelweni takho, sitsintse noma ubone emisebenti yetfu.

Imitfombo

• Binance — Security incident investigation update, 3 Novemba 2026: kulandzelana kwa-Juni, Septemba, 20 na-29 Oktoba, tinkhulumiswano letimbili, timali letimisiwe naletibuyiselwe, kanye netimo letingu-57 tetinsongo.
• Ligunya Lavelonkhe Lekuvikeleka Kwe-inthanethi (NCA) — Essential Cybersecurity Controls ECC-2:2024: bubanti kanye netilawuli 1-10-3, 2-2-3-3 ne-2-3-3-1.
• TechCrunch — Researchers warned of North Korean hacking tactics years before record $6.3B Binance heist, 3 Novemba 2026: inombolo ye-CrowdStrike netecwayiso tangaphambilini.
• TechTarget — Binance details recruiter impersonation behind $6.3B wallet breach, 3 Novemba 2026: teluleko tachwepheshe ngemadivayisi abonjiniyela besofthiwe.
• Nextgov/FCW — Binance says fake job interview helped North Korean hackers steal $6.3 billion, Novemba 2026: kusola kwe-FBI kutsi kuhlasela kwentiwa yi-North Korea.