AI-fueled hacking spree ‘Black October’ culminated with record Binance hack

'Black October' is the New York Post's name for it, which is generous — it sounds less like a catastrophe than a seasonal promotion at a mattress warehouse. The spree culminated on Thursday with North Korean hackers lifting an estimated $6.3 billion from Binance, and the FBI duly confirmed on Saturday that the TraderTraitor unit was behind it. TraderTraitor. Somewhere in a Pyongyang committee room, several people agreed that was the name. And note the word 'estimated', which in a $6.3 billion context means the real number is probably worse and nobody in a position to know is in any hurry to clarify it. Two days from heist to federal confirmation, incidentally — roughly the turnaround the rest of us get on a lost parcel.

The target list reads like a fridge-magnet poem: the Federal Election Commission, Sony, John Deere, Oracle Health, the State Bank of India and — with real grim elegance — OpenCode, an open-source coding agent. Tractors, patient records, the Indian banking system and the machinery of American elections, all filed under one incident report. Try to construct a threat model that covers a combine harvester and a democracy with equal aplomb; the lads clearly did, and had a lovely month of it. Six named victims, one summary paragraph, and a straight face throughout.

The Post attributes the sheer volume to AI models that have 'drastically lowered the skill barrier' for attackers. Lowered it. Democratised it. Where once you needed patience, a plausible lede and a working knowledge of memory corruption, now you need a subscription and a vague sense of grievance. And there, quietly, sits the Federal Election Commission, days after we were assured election security was at breaking point. The barrier came down; nobody thought to raise the other one. Blame the models, obviously — they're the ones who read the phishing email and believed it.