Phishing Attack Targets LastPass Users’ Master Passwords

LastPass is warning of a phishing campaign designed to steal users’ master passwords and give attackers access to their password manager accounts.

In order to convince LastPass users to hand over their passwords, attackers used a mix of phone calls, phishing emails and a phishing page under the domain “help-lastpass[.]com,” which has since been taken down. If they were able to successfully obtain the users’ master passwords, attackers would log into the victims’ accounts and lock them out by changing …

access accounts attack attackers campaign com domain emails lastpass manager master order page password password manager passwords phishing phishing attack phishing campaign phishing emails phone phone calls steal under warning