Binance Tests Employees' Phishing Resilience with Monthly Simulations

Binance, one of the largest cryptocurrency exchanges in the world, has been conducting internal phishing simulations against its employees for several years.

The exchange's chief security officer, Jimmy Su, revealed that Binance's internal red team performs phishing tests on a monthly basis to assess the staff's resistance to social engineering attempts.

Failed phishing tests are followed by remediation training, aiming to improve employees' security habits over time. The results of these simulations can also influence performance reviews and even lead to dismissal for repeated failures.

Su stated that Binance has seen significant improvement in its staff's 'security hygiene' since implementing the program, which is designed to test whether employees have become more vigilant over time.