Hello! We solved the issue with the...

Hello! We solved the issue with the client, but the negative feedback remained. Therefore, we will answer here too:

Our technical support service has determined that confidential data from the client’s mail was in the databases of data leaks that were detected through the Firefox service.

Unfortunately, the customer’s account did not have 2fa on withdrawal and 2fa on account login, although the company informed customers that these features were available and should be used to protect their accounts. Thus, an attacker who gained access to the mail was able to change the account data to UT and withdraw the tokens.

The tokens were withdrawn from several more of our clients using the same scheme. All of them were later found to have leaked confidential data on third-party resources. This leak was used by the attacker to gain access to the mail.

If the security problem had been on our side, there would have been many times more affected customers. Despite this, we still conducted a penetration test. The test did not reveal any problems on the company’s side, which confirms the fact that the attacker first gained access to the client’s mail and only then gained access to the account at unitedtraders.com.

After what happened, our company tried to identify the intruder, assisted the client in self-investigation and itself contacted specialized companies that deal with information security. Unfortunately, this did not lead to any results.

We notify all our clients about the need to use 2FA to protect their accounts and stay in touch: 8 800 333-66-81, [email protected].