Binance CEO Richard Tang said that attackers are trying to gain access to user accounts by posing as company employees. During a phone call, the scammers convince customers to change their API settings, explaining this as a "planned security update." After making the changes, the attackers gain full control over the account and quickly withdraw funds to their own wallets.
Tang emphasized that real Binance representatives never ask for passwords or other confidential data over the phone. He strongly recommends that if in doubt, contact only through official support channels.
According to the management, the most reliable protection against such attacks remains two-factor authentication, as well as the use of Passkey technology. This authorization method allows you to log in using biometric data or a device PIN code, which significantly reduces the risk of unauthorized access. In the event of a suspicious call, the exchange advises users to immediately revoke all API keys and temporarily block their account until the circumstances are clarified.
The danger for digital asset holders is increasing amid new threats in the field of cybersecurity. Recently, CrowdStrike specialists reported on the Shamos malware created by the COOKIE SPIDER hacker group. The virus is targeted at devices running macOS and is designed to steal data from cryptocurrency wallets.
Thus, Binance experts remind that users themselves play a key role in ensuring their own security. Ignoring suspicious calls, using modern authentication methods, and quickly responding to hacking attempts remain the main conditions for the safety of funds.