SignalPlus recently revealed a cyberattack resulting in losses under $82,000 after hackers exploited a fake Microsoft Teams invitation. The breach compromised API keys connected to their derivatives trading platform, triggering responses from major exchanges.
Binance and Deribit quickly revoked affected API keys to contain potential damages. SignalPlus’s incident statement on November 5 detailed how the attack leveraged social engineering tactics to infiltrate their systems.
“The security lapse centered around unauthorized access through compromised API keys,” the statement read.
Security Implications
- Highlights the risks of social engineering in crypto platforms
- Emphasizes the need for enhanced API key management
- Prompts derivative platforms to review security protocols
This incident serves as a reminder that even in highly regulated environments, vulnerabilities remain a threat. SignalPlus is reportedly enhancing safeguards to prevent future breaches.