SignalPlus admits API security gap after hack costs under $82K

SignalPlus has disclosed losses of less than $82,000 from a cyberattack involving a fake Microsoft Teams invitation, after Binance and Deribit revoked API keys connected to the derivatives trading platform. Summary Less than $82,000 was lost, with SignalPlus promising full reimbursement for all affected users. A compromised vendor contact’s Telegram account was used to send an engineer a fake meeting invitation. Binance and Deribit revoked SignalPlus-linked API keys, saying their own systems were unaffected. SignalPlus acknowledged missing mandatory IP whitelisting and suspended services while reviewing its security. According to SignalPlus’s Nov. 5 incident statement, the attack affected a small number of accounts without IP whitelisting. The company said it detected suspicious activity early on Nov. 4 and contained the intrusion before contacting its exchange partners to disable connected customer credentials. TL;DR: In the early hours of Nov 4, SignalPlus was targeted in an attack that began with a compromised third-party Telegram account, affecting a small number of accounts without IP whitelisting.We detected and contained the intrusion quickly. As a precaution, we immediately...