14.1 C
Berlin
Thursday, March 28, 2024

Password manager LastPass hacked: What you need to know and do now

Follow US

80FansLike
908FollowersFollow
57FollowersFollow

LastPass was the target of a hacker attack in early December in which customer information was lost. Now the company is revealing more details.

LastPass, the world’s hugely popular password manager, has become the target of a hacker attack – again. It was only in August that hackers gained access to the company’s developer tools. The provider assures that no customer information was lost in the process.

At the beginning of December, i.e. already about three weeks ago, a second attack was reported, which was only possible on the basis of the scammed information from August. This time, certain customer information was stolen 

What exactly was stolen?

The certain customer information is the following data:

  • Company names
  • User names
  • Invoice addresses
  • Email addresses
  • IP addresses
  • Phone numbers
  • Website URLs
  • Encrypted website passwords and usernames (256-bit AES)

LastPass assures that no payment information, such as credit card numbers, has been stolen However, as can be seen, the stolen data is quite explosive and communication to customers is being questioned

The backup that the hackers copied also contains usernames and passwords for websites, but these are heavily encrypted and should be secure. The master password is not stored at LastPass, but it does not preclude the hackers from trying to guess it from the other stolen data.

Furthermore, with the data, the attackers are able to launch phishing attacks on customers and impersonate LastPass, for example, in order to obtain the master password.

What should you do as a customer?

If you use a secure master password on LastPass, your data should be safe because, according to the company,it would take millions of years to guess one. If you use a less secure password and you also use it on other websites, then it is strongly recommended that you change all passwords for the saved websites as soon as possible 

As for phishing attacks: LastPass will never ask you for your master password or ask you to match private data. How such a phishing scam can go down and what you can do about it!

The high popularity of LastPass unfortunately makes it a popular target of such attacks. Its competitors have had far fewer security issues reported in the past. For those who want to switch, here are five alternatives:

Do you use a password manager yourself or do you have security concerns about it? Write us your opinion in the comments

RELATED ARTICLES

Resident Evil 9 as Open World: Major change of direction is imminent, says an insider

The next edition of the famous survival horror game could let us explore the game world completely freely for...

Call of Duty: Warzone – This SMG is more assault rifle than SMG: The best setup for the AMR9

This SMG in Warzone can be played as both an SMG and an assault rifle. We have the best...

Free on Steam: Unreal Physics wants to show you what”s possible with Unreal Engine 5

Unreal Physics wants to "push the boundaries of Unreal Engine". You can now find out whether this works on...