LASTPASS users have been warned about a phishing email that aims to steal their data and money.
Phishing is a scam where attackers deceive people into revealing sensitive information.
1
Typically, the goal of the scammer is to steal a user’s banking information, identity, or passwords.
Although in some cases, the criminals are trying to distribute malware, or malicious codes that can infect your device.
LASTPASS SCAM
This particular phishing scam comes in the form of an email asking LastPass users to update their password or account information.
The emails contain a link that redirects users to a fake LastPass login page.
Should a user enter their login credentials on the fake page, the scammers will steal them.
Experts from MalwareBytes explained that the emails appear very convincing.
They use the same logos and branding as the real LastPass emails and are “executed with high production values.”
However, there were two red flags that almost always indicate a scam: demanding personal information and attempting to hurry the victim, MalwareBytes revealed.
HOW TO STAY SAFE
There are a few ways to stay safe against phishing attacks, according to experts.
First, make sure to enable email security features – such as malware detection.
You should also never give any personal information to anyone over SMS or email.
If you believe you have been scammed, contact your credit card company or bank right away to stop the transaction.
It’s also important to report any scams you may encounter to the Federal Trade Commission.
