Fake Teams invitation compromises SignalPlus internal network
A fake Teams invitation sent from a compromised Telegram account belonging to a partner company representative infected a SignalPlus engineer's PC, compromising its internal network and trading platform. The company estimated losses at less than $82,000. Binance and Deribit revoked the linked API keys, and the service was temporarily suspended.
Key facts
- Affected organisation
- SignalPlus
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Losses of less than $82,000 and temporary service suspension
- Cause / method
- An engineer's PC was infected by a fake Teams invitation from a compromised partner company Telegram account, leading to an internal network breach
- Location
- Hong Kong SAR China
Timeline
- The SignalPlus breach, estimated losses of less than $82,000, and Binance and Deribit's revocation of linked API keys were disclosed.
- SignalPlus's temporary service suspension and acknowledgement of API security weaknesses were disclosed.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.