Binance conducts phishing attacks against its own employees.

Binance regularly conducts phishing attacks on its employees to test their resilience to cyber threats, according to Jimmy Su, the chief security officer of the world's largest crypto trading platform. Binance has been conducting such tests for three to four years. During this time, the security director believes the company has managed to increase employee awareness of cyber threats. "We conduct phishing attacks on our own employees monthly. Those who fail the tests receive additional training," the Binance security director explained. The simulated attacks are carried out by Binance's internal "red team"—a unit specializing in ethical hacking and identifying vulnerabilities in the company's infrastructure. One common testing scenario is fake job offers, but employees may also receive conference invitations and other messages designed to assess their resilience to social engineering methods. The results of these tests are taken into account in employee performance reviews. According to Su, regular failures lower an employee's internal rating, and repeated serious violations can lead to dismissal. Earlier, Natalie Newson, a senior analyst at cybersecurity firm CertiK, said that the main causes of hacker attacks are real-time deepfakes, supply chain attacks, and phishing.