LastPass confirms security incident
by Tina Siering
Parts of source code copied at password manager provider LastPass
Password manager provider LastPass has become the victim of a data theft. The company has confirmed the security incident.
On 25/08/2022, LastPass stated in a blog post that unusual activity had been detected in parts of the LastPass development environment dating back two weeks. Unknown persons had gained access via a hacked developer account and stolen parts of the source code, as well as technical information. However, products and services were functioning normally, and the software had not been restricted at any time. Master passwords or personal customer data in safes were reportedly not stolen. It is unclear how the account access took place in detail. There are currently no indications that the attackers are still in the system. The internal investigation of the development environment and the programme are still ongoing, the company said.
Recommendation for LastPass users
According to LastPass, the master password does not need to be changed. But even though the provider has given the all-clear, users should be particularly careful at the moment. It cannot be ruled out that more data may have been leaked. Users are advised to keep a close eye on the sites and services managed with LastPass for anything unusual.
Need help upgrading your IT security for 2022? Contact us!
Related articles
For several days now, there has been a strong accumulation of successful compromises by the "QakBot" malware (also known as "QBot" and "QuackBot") worldwide. We have also already identified successful attacks as part of our ACD monitoring. After infection, criminals can gain access to online banking accounts, leak user data, and reload further malware. As one measure to mitigate the risk, we urgently recommend adjustments to the Group Policy Objects (GPO).
Cybercriminals are true masters at constantly adapting their attack mechanisms to effective IT security measures. New tools and iterative changes to existing malware are used to mercilessly exploit security vulnerabilities. Among the numerous threats, ransomware stands out as one of the biggest. More and more companies have to face extortion Trojans. A completely new threat called LockFile now relies on intermittent encryption. LockFile not only encrypts much faster than previous ransomware, but also bypasses security solutions that work reliably. This article shows why criminals are increasingly relying on intermittent encryption and how companies should react to the new threat.
Read more … New ransomware trend: Why criminals increasingly rely on intermittent encryption
Due to the war in Ukraine, secion provides an assessment of the threat situation for companies and examines the question of whether increased Russian attacks on companies in Germany, Austria and Switzerland can be identified. There is currently no evidence of an acute increase in the threat posed by Russian state actors in Western Europe, but there is increased public awareness of these cyberattacks. In addition, "third-party actors" are creating a new dynamic.