Binance, Deribit revoke SignalPlus API keys after fake Teams invite attack
SignalPlus said attackers compromised an engineer’s computer in a breach that resulted in losses of less than $82,000, which the crypto trading platform pledged to reimburse in full.
Crypto derivatives trading platform SignalPlus has revoked API keys linked to Binance and Deribit following a security breach. The breach, which occurred after an engineer's computer was compromised, resulted in minimal financial losses, estimated at less than $82,000. Binance and Deribit confirmed that their systems remained unaffected by the attack.
Deribit, however, noted that trading, monitoring, and automation services through SignalPlus were disrupted for its users. SignalPlus, a platform providing trading infrastructure for crypto derivatives, including options, attributes the breach to a compromised Telegram account associated with a vendor contact. The attacker used a fake Microsoft Teams meeting invitation to gain access to the engineer's computer, which was then exploited to infiltrate SignalPlus's internal network.
The company detected and contained the intrusion, and is currently working to restore its services. SignalPlus acknowledged a security oversight in not implementing IP whitelisting for exchange API access and pledged to enhance its security measures moving forward. This incident follows Binance's revelation of a $6.3 billion hack, attributed to compromised employee computers and a phishing email.
Binance's co-founder, Yi He, has warned about the increasing sophistication of cyber threats, including fraudulent job interviews, malicious software packages, and attempts to steal employee credentials.
Written by urgent.news from Cointelegraph's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
