Binance, Deribit Kill SignalPlus API Keys After $82K Social Engineering Breach

Key Takeaways: Binance and Deribit removed all the API keys associated with SignalPlus.

The losses haven’t exceeded $82,000, SignalPlus said, and its users will be reimbursed.

The attack started with a compromised Telegram account and a fake Microsoft Teams invite.

User Score8.7 Follow us on Google News Binance and Deribit have disabled API keys connected to SignalPlus after the crypto derivatives infrastructure provider disclosed a cyberattack that compromised one of its engineers.

The exchanges claimed that there were no issues with their systems.

Binance also stated that no funds of its users had been lost, and Deribit identified no signs that its systems or data were compromised.

Binance and Deribit Cut SignalPlus Access SignalPlus said the incident began early on Nov.

4 and affected a small number of accounts that did not use IP whitelisting.

TL;DR: In the early hours of Nov 4, SignalPlus was targeted in an attack that began with a compromised third-party Telegram account, affecting a small number of accounts without IP whitelisting.

We detected and contained the intrusion quickly.

As a precaution, we immediately worked with our CEX partners to revoke all SignalPlus-linked API keys and temporarily paused our terminal services.

Continue reading at the original source →