SignalPlus admits API security gap after hack costs under $82K

SignalPlus has disclosed losses of less than $82,000 from a cyberattack involving a fake Microsoft Teams invitation, after Binance and Deribit revoked API keys connected to the derivatives trading platform. Less than $82,000 was lost, with SignalPlus promising full reimbursement for all affected users. A compromised vendor contact’s Telegram account was used to send an engineer a fake meeting invitation. Binance and Deribit revoked SignalPlus-linked API keys, saying their own systems were unaffected. SignalPlus acknowledged missing mandatory IP whitelisting and suspended services while reviewing its security. According to SignalPlus’s Nov.

Source: crypto.news