SignalPlus Suffers Cyberattack With Losses Under $82,000, Pledges Full Compensation for Affected Users

According to TechFlow, on November 5, SignalPlus released a statement disclosing that the platform suffered a cyberattack in the early hours of November 4. The attack originated from a compromised Telegram account belonging to a contact at a third-party technology vendor. The attacker used a forged Microsoft Teams meeting invitation to lure an engineer into downloading malicious content, then took control of the device and infiltrated the internal network. Total losses from the incident were less than $82,000, and affected users will receive full compensation.

SignalPlus said that after detecting the anomaly, it quickly blocked the attack, contacted partner exchanges to disable all associated API keys, and suspended platform services for a comprehensive security review. The company acknowledged that it had not previously required IP whitelisting for exchange API keys. Going forward, it will strengthen API access restrictions, endpoint security, and internal access controls, and expects to restore services in phases over the coming days. During this period, users can still manage their accounts and positions through the official platforms of partner exchanges.

Source: TechFlow