Sept. 18, 2023, 11:02 a.m. | Bruce Schneier

Schneier on Security www.schneier.com

Remember last November, when hackers broke into the network for LastPass—a password database—and stole password vaults with both encrypted and plaintext data for over 25 million users?


Well, they’re now using that data break into crypto wallets and drain them: $35 million and counting, all going into a single wallet.


That’s a really profitable hack. (It’s also bad opsec. The hackers need to move and launder all that money quickly.)


Look, I know that online password databases are more convenient. …

crypto cryptocurrency crypto wallets data database encrypted hacked hackers keys lastpass network november operational security password passwords password safe password vaults plaintext single steal wallet wallets

Business Information Security Officer

@ Metrolink | Los Angeles, CA

Senior Security Engineer

@ Freedom of the Press Foundation | Remote, 4 hour time zone overlap with New York City

Security Engineer

@ ChartMogul | Remote, EU

Senior Threat Engineer

@ Zscaler | Tel Aviv-Yafo, Israel

Information Security Communication Specialist

@ MicroStrategy | Mumbai, India

Principal Software Engineer (Network Security - SASE)

@ Palo Alto Networks | Santa Clara, CA, United States