Binance Runs Monthly Phishing Drills, Warns Repeat Failures May Lead to Dismissal

Binance ties phishing test results to employee reviews as social engineering accounts for most crypto security incidents.

Cryptocurrency exchange Binance has spent years testing its own workforce against phishing attacks as part of a wider effort to reduce security risks. Company executives say social engineering remains one of the biggest threats facing the digital asset industry. Monthly simulations now form a regular part of employee security training. Staff members who repeatedly fail those tests may eventually face poor performance ratings or even dismissal.

Fake Recruiters, Conference Invites Part of Binance’s Monthly Security Tests

Binance chief security officer Jimmy Su said the company’s internal red team carries out fake attacks every month. Red teams are ethical hackers tasked with finding weaknesses before criminals can exploit them. According to Su, employees who fall for simulated scams must complete additional training to improve their awareness.

Su said Binance introduced the programme about three to four years ago. Early results showed many workers struggled to identify phishing attempts. Regular testing and follow-up training have since led to noticeable improvements in employee security habits.

… Continue reading the full article at the original source below.