Binance says it has been running simulated phishing attacks on its own staff every month for the past four years, using the results to measure whether its security practices are improving. The exchange’s chief security officer, Jimmy Su, told Cointelegraph that the internal “red team” carries out the exercises and that employees who repeatedly fail may be sent for remediation training.