Tag: Password Manager
-
The 24-Hour Trap: LastPass Issues Alert Over Master Password Phishing Spree
LastPass has issued a formal admonition regarding a nascent phishing campaign wherein unidentified actors endeavor to usurp users’ master passwords. This incursion masquerades as a legitimate administrative communiqué from the service, specifically engineered to plunder sensitive data from password repositories. The fraudulent missives, which commenced circulation around January 19, allege imminent technical maintenance requiring account…
-
LastPass ‘Death Hoax’ Phishing Targets Crypto: New CryptoChameleon Scam
A large-scale phishing campaign targeting LastPass users and clients of major cryptocurrency exchanges began in mid-October, spreading under the guise of official service notifications. LastPass has warned that the attack is orchestrated by the group CryptoChameleon (UNC5356), notorious for cryptocurrency thefts through social engineering and fake account recovery sites. The fraudulent emails are sent from…
-
Phishing Campaign Targets Master Passwords of Top Managers
In recent weeks, a surge of phishing campaigns has emerged in which attackers impersonate popular password managers — LastPass, Bitwarden, and 1Password. Their objective is to deceive users into revealing their master password, the single key granting access to all stored credentials, including those of corporate systems. The attacks exploit a foundation of trust, as…
-
Major Flaw Exposes Password Managers to “One-Click” Data Theft
Popular browser extensions used for password management have been found vulnerable to a novel attack technique known as DOM-based extension clickjacking. The method was unveiled by independent researcher Marek Tot at DEF CON 33. According to him, an attacker needs only to craft a malicious website with a counterfeit pop-up window: a single click on…
-
Proton Launches Standalone Authenticator: Separating MFA from Passwords for Ultimate Security
Proton has unveiled Proton Authenticator—a standalone application for two-factor authentication (2FA), available across Windows, macOS, Linux, Android, and iOS. It employs TOTP codes that refresh every 30 seconds, providing an additional layer of protection when signing into online services. Previously, Proton introduced a suite of privacy-centric tools: Proton Mail, Proton VPN, Proton Drive, and Proton…
-
Windows 11 25H2 Dev Build Unveils Deeper 1Password Integration for Seamless Passkey Management
Microsoft has released a new Windows 11 update (Build KB5060838) for participants of the Windows Insider Program in the Dev Channel. This update introduces both publicly available enhancements and features that are being gradually rolled out to users who have enabled a dedicated toggle within the update settings panel. A standout addition is the integration…
-
Dropbox will provide the password manager for free
Dropbox is a very well-known file hosting service. Originally, many users used an open-source password manager to host their data in Dropbox for storage. And now Dropbox announced the launch of its own password manager for users to use, of course, this is not free and requires users to purchase a subscription service before they…
-
LastPass free service no longer supports cross-platform for free users
At present, the password manager market has attracted quite a few participants, including Apple and Microsoft, which are actively developing password managers to facilitate cross-platform use by users. Some early password manager developers are also adjusting their policies. For example, 1Password keeps sending free home editions for a limited time to attract more users to…
-
Firefox Launches Firefox Lockbox Password Manager for Android
Mozilla officially announced the launch of the Firefox Lockbox password manager for the Android platform, which is now available for download by Android users. The password manager itself is also an experimental project from the Firefox browser, which was officially launched after the completion of the experiment and was not taken away after some projects…