Binance Phishes Its Own Staff Monthly to Preempt Cyberattacks

Binance is conducting monthly simulated phishing attacks against its own workforce to bolster its defensive posture. Chief Security Officer Jimmy Su revealed that the exchange utilizes an internal red team to identify critical vulnerabilities before malicious actors can exploit them.

This aggressive security protocol serves as a vital litmus test for the company's digital hygiene. Employees who consistently fail these simulated attacks face remediation training or potential termination, highlighting Binance's zero-tolerance approach to internal security risks in the volatile crypto market.

Binance has been running simulated phishing attacks against its own employees for the past four years to get ahead of potential cyberattacks. According to Binance Chief Security Officer Jimmy Su, the exchange even maintains the authority to fire staff members who repeatedly fail these security tests.

These fake attacks are orchestrated by Binance’s 'red team,' an internal ethical hacking unit tasked with breaking into systems to uncover weaknesses. 'We do phishing attacks on our own employees on a monthly basis just so we understand if our security hygiene is improving,' Su told Cointelegraph. Those who fail the tests are required to undergo remediation training.