In today’s Internet age, in order to maintain the security of various online accounts, individuals and businesses will purchase services from password management companies. LastPass is one of the largest representative companies in the world. Recently, it was reported that LastPass was attacked by hackers. Unscrupulous people directly targeted the company’s source code and proprietary technical information. It’s a good idea!
LastPass, one of the largest password management companies, was recently hacked, and its source code and patented technology were directly stolen.
LastPass is one of the world’s largest password management companies, claiming to have more than 33 million users and 100,000 businesses using its services. The hacking incident disclosed this time was disclosed to foreign media by insiders. Bleeping Computer According to sources, LastPass employees are doing their best to contain the attack and fix the vulnerability after the hack. However, after Bleeping Computer contacted the company on August 21, officials have not yet responded to the media’s questions.
After reports of the attack emerged, LastPass issued an announcement confirming that hackers had infiltrated and carried out the damage through compromised accounts used to access the company’s developer environment. While LastPass says it has no evidence that user data or encrypted password safes were compromised, the cooperators did steal some of their source code and proprietary LastPass technical information.
LastPass explained that in response to the incident, they had deployed containment and mitigation measures and hired a cybersecurity and forensics company to respond. Although the investigation is still ongoing, the deterioration has been contained and additional security enhancement measures have been implemented. There is currently no evidence of further unauthorized activity. LastPass has not yet provided further details about the attack, such as how the threat actors compromised developer accounts and what code was stolen.
The complete security advice LastPass sends to users via email is as follows:
LastPass stores passwords in an “encrypted vault” that can only be decrypted using the customer’s master password, which LastPass says no one was compromised in the cyber attack. Last year, LastPass was hit by a credential stuffing attack that allowed threat actors to confirm a user’s master password, which was revealed to have been stolen by a threat actor spreading the RedLine password-stealing malware. That’s why it’s crucial to enable multi-factor authentication on your LastPass account so that even if your password is compromised, bad actors won’t be able to access your account.
Source: KOCPC Chinese