
A recent series of phishing attacks targeted LastPass users, employing sophisticated tactics including the use of a deepfake audio impersonation of CEO Karim Toubba. Despite these advanced techniques, an initial attempt to deceive a LastPass employee using the deepfake audio was unsuccessful. However, subsequent attacks have been more effective, with multiple users reportedly losing their master passwords to these scams. The attackers have posed as LastPass staff, convincing even tech-savvy individuals. Warnings have been issued advising users to be cautious of any communication that appears to be from LastPass, emphasizing that such contact is likely fraudulent.
If you get a phone call from LastPass, it’s a scam https://t.co/TKuQ3Pf9TN by @MichaelCrider
Multiple LastPass Users Lose Master Passwords to Ultra-Convincing Scam: https://t.co/zyVBGjryJB by darkreading #infosec #cybersecurity #technology #news
LastPass Master Password Threat Confirmed—Don’t Press 1 Or 2 https://t.co/UmDFQgKY2T










