binance and deribit just revoked signalplus api keys

a fake teams invite did it

attacker got an engineer's laptop, then the keys

losses came in at just under $82,000

signalplus says it pays every affected user back in full

that part is the rare part

the lesson is dull and it never changes

work chat and exchange keys do not belong on the same machine

one click on a calendar link is all it takes