SlowMist Founder: Binance Hack Was an APT Attack, Should Not Be Blamed Solely on Engineers' Basic Errors

According to TechFlow, on November 4, SlowMist founder Cosine (@evilcos) posted on X that after reviewing Binance's disclosure of the theft process, many people believe the engineer involved made a basic error and held excessive privileges. However, this type of incident constitutes an Advanced Persistent Threat (APT), encompassing multiple stages such as psychological manipulation, reconnaissance, malware evasion, trust chain exploitation, targeted lateral compromise, cloud environment penetration, risk control bypass, and zero-day vulnerabilities. The incident cannot be evaluated solely based on the initial social engineering phase.