LastPass developer systems hacked to steal source code

Password management service LastPass confirmed a security incident that resulted in the theft of certain source code and technical information.

The security breach is said to have occurred two weeks ago, targeting its development environment. No customer data or encrypted passwords were accessed, although the company provided no further details regarding the hack and what source code was stolen.

LastPass is one of the largest password management companies in the world, claiming to be used by over 33 million people and 100,000 businesses.

However, LastPass stores passwords in 'encrypted vaults' that can only be decrypted using a customer's master password, which LastPass says was not compromised in this cyberattack.

LastPass suffered a credential stuffing attack that allowed threat actors to confirm a user's master password. It was also revealed that LastPass master passwords were stolen by threat actors distributing the RedLine password-stealing malware.

Due to this, it is vital to enable multi-factor authentication on your LastPass Accounts so that threat actors won't be able to access your account even if your password is compromised.

latest news

[{"selector":"#anim-90af5748-c895-4474-a236-d96fde806e2e","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-97e496eb-57f2-4d9c-afb1-2bfd1d378320","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] https://www.news4hackers.com/ Arrow Visit us

Password management service LastPass confirmed a security incident that resulted in the theft of certain source code and technical information.

The security breach is said to have occurred two weeks ago, targeting its development environment. No customer data or encrypted passwords were accessed, although the company provided no further details regarding the hack and what source code was stolen.

LastPass is one of the largest password management companies in the world, claiming to be used by over 33 million people and 100,000 businesses.

However, LastPass stores passwords in 'encrypted vaults' that can only be decrypted using a customer's master password, which LastPass says was not compromised in this cyberattack.

LastPass suffered a credential stuffing attack that allowed threat actors to confirm a user's master password. It was also revealed that LastPass master passwords were stolen by threat actors distributing the RedLine password-stealing malware.

Due to this, it is vital to enable multi-factor authentication on your LastPass Accounts so that threat actors won't be able to access your account even if your password is compromised.

latest news

Contact us 951 380 5401

ENDPoINT Security course in saket

100% Job placement

Craw Security

👉🏻

Malware Analysis course in saket