LastPass reveals attackers stole password vault data by hacking an employee’s home computer
, LastPass revealed that the hackers had used information from the first breach in August to access its systems during the second incident in November and that the attacker was able to copy a backup of partially encrypted customer vault data containing website URLs, usernames, and passwords. LastPass then advised its users to change all of their stored passwords as “an extra safety measure,” despite maintaining that the passwords were still secured by the account’s master password.
Now, LastPass has revealed the threat actor responsible for both security breaches was “actively engaged in a new series of reconnaissance, enumeration, and exfiltration activities” between August 12th and October 26th. During this time, the attacker stole valid credentials from a senior DevOps engineer to gain access to shared cloud storage containing the encryption keys for customer vault backups stored in Amazon S3 buckets.
It’s suspected the hacker accessed the private computer via Plex media software installed on the machine Just four DevOps engineers had access to the decryption keys needed to access the cloud storage service. One of the engineers was targeted by exploiting an vulnerable third-party media software package on their home computer and installing keylogger malware.
Australia Latest News, Australia Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
LastPass says hackers broke into an employee PC to steal the company's password vault | EngadgetThe bad actors involved in a couple of LastPass security breaches last year also infiltrated a company DevOps engineer's home computer.
Read more »
LastPass reveals how it got hacked -- and it’s not good news | Digital TrendsLastPass was hacked repeatedly in 2022, and the company has just disclosed how it happened. The revelations don’t look good for the prominent password manager.
Read more »
Rachel Brosnahan says she ‘stole all the coats’ from ‘Marvelous Mrs. Maisel’“I did tell them I was going to bring a U-Haul to the last day (of filming),” Brosnahan quipped.
Read more »
Police seek Good Samaritan-turned-bad who stole elderly woman's credit cardWhen an 85-year-old woman got her car stuck last December, she was so grateful when a man offered to move her car out of her driveway. 10 days later, she realized her credit card was missing. FOX13
Read more »
Mountlake Terrace PD seek suspect who stole vape stand from deli shopPolice in Mountlake Terrace are asking for the public's help to identify a man who walked out of a store with a vape stand. FOX13
Read more »
Murdoch testified Fox News hosts endorsed idea that Biden stole electionFox Corp Chairman Rupert Murdoch acknowledged under oath that some Fox hosts 'endorsed' the notion that the 2020 U.S. presidential election was stolen, according to a court filing unsealed Monday.
Read more »