Binance Targets Employee Security Awareness with Monthly Phishing Tests
Binance's red team conducts monthly phishing tests on employees to gauge their security awareness.
The internal unit designs fake attacks that mimic real threats, including recruiter outreach and free conference invitations. Employees who fail face mandatory remedial training, while repeated serious failures can affect performance ratings.
The program has operated for three to four years and has improved staff security habits over time, said Binance's chief security officer Jimmy Su.
Binance reports 323 million registered users and holds an estimated $137.7 billion in assets, making staff-level security failures a potential entry point for major breaches.