An important password management company is suffering a phishing attack that could lead you to lose your account

LastPass users are facing a new and dangerous phishing campaign that attempts to steal their credentials. Cybercriminals are impersonating the popular password management company to trick users into believing they need to create a local backup of their digital vaults, where their passwords are stored. According to a statement released by LastPass, this campaign began on January 19 and has been described as highly convincing.

Don’t fall for this phishing case

Fraudulent emails appear to come from illegitimate addresses, such as “support@lastpass[.]server8” and “support@sr22vegas[.]com”, and aim to create a sense of urgency by claiming that backing up is necessary due to scheduled maintenance. LastPass emphasized that it has not asked its customers to back up their accounts within 24 hours, warning about possible manipulation.

Hackers are cunning in including a button that says “Create backup now,” which when clicked takes users to a phishing site designed to steal their credentials, potentially including the master password. This type of deception underscores the importance of being alert to warning signs and practicing good cyber habits.

Experts recommend that users utilize different services to store critical passwords and memorize their master password, avoiding writing it down in an accessible place. Additionally, passkeys offer a more secure alternative, as they are linked to a specific device and are harder to crack than traditional passwords.

In this context, it is crucial to remain calm and not be swayed by urgency when receiving suspicious emails. It is always advisable to carefully inspect the links and the legitimacy of the email addresses to avoid falling for scams that can compromise the security of our personal information.

Avast Free Antivirus DOWNLOAD