Recent LastPass Hacks: What You Need to Know
In a shocking turn of events, Cointelegraph reported that the notorious LastPass hackers struck again, impacting 40 victims and resulting in a staggering theft of $5.36 million just days before Christmas. This incident is a continuation of the cybersecurity threats that have plagued LastPass and its users for quite some time.
The Recurring Threat
This recent breach follows a major data leak in December 2022, when hackers accessed customer vault data from encrypted storage. Since that incident, reports have indicated that the total crypto stolen has surpassed $35 million. The current hacks, including the latest theft and a significant incident on October 25 involving $4.4 million, have now brought total losses close to $45 million.
How the Funds Were Moved
The latest attack involved converting the stolen funds into Ether (ETH) and then transferring them to multiple instant exchanges. Blockchain investigator ZachXBT provided on-chain evidence of these fraudulent activities on the crypto scam reporting platform Chainabuse.
A Call to Action from Security Experts
The Security Alliance (SEAL), a group of white-hat hackers, issued a strong warning on December 16. They emphasized that private keys and seed phrases stored on LastPass accounts before 2023 are particularly at risk. Users are being urged to take immediate action and transfer their assets to safer alternatives to prevent any further losses.
Non-Crypto Targets and Wider Theft Context
It's important to note that the recent attacks have not only targeted cryptocurrency wallets. An estimated $250 million was stolen in May from various theft incidents, according to blockchain investigator 'Tay'. Both SEAL and Tay are adamant that former LastPass users must act swiftly to safeguard their funds.
Awareness During the Holiday Season
The recent surge in LastPass hacks aligns with an alarming rise in scams during the Christmas season. The blockchain security firm Cyvers has dubbed this time as "hacker season," urging individuals to remain vigilant. They recommend being cautious of anything that seems overly festive, ensuring that 2FA codes are protected, and avoiding connections to free WiFi networks.
Understanding the Risks
This year, the festive period is particularly notorious for scams. As distractions rise with holiday celebrations and transactions increase, cybercriminals are presented with ample opportunities. Despite a 53% drop in phishing losses recorded in November, it’s highly likely that scammers will attempt to recover their losses during this peak holiday season.
Conclusion
In light of these recent developments, it’s paramount for LastPass users, as well as the wider public participating in online transactions, to exercise heightened caution. Migrating to secure wallets and platforms is essential in safeguarding oneself against the persistent threats of cyber theft.
Leave a comment
All comments are moderated before being published.
This site is protected by hCaptcha and the hCaptcha Privacy Policy and Terms of Service apply.