LastPass Issue Urgent Warning Over New Security Scam To Steal Passwords

LastPass is informing users of an active phishing campaign that started at the beginning of this month, which spoofs official LastPass emails and directs users to a false login page. While directing to a false login page is a common phishing tactic, this new LastPass scam adds an additional layer of deception by creating entire fake email chains to convince users a breach has already happened and that they have to take action quickly. Some basic display name spoofing on top of that, to mask the true email addresses involved, creates a sophisticated phishing scam that tricks users into giving up their master password.

For phishing scammers, successfully fooling victims into handing over access to a password manager is a veritable goldmine. As LastPass' name implies, the purpose of a password manager is to secure all of your services with one unbreakable Master Password, one that could indeed be your ...