LastPass users targeted in phishing attacks good enough to trick even the savvy

Comments

• natural_motions@lemmynsfw.com ⁨6⁩ ⁨months⁩ ago

  [deleted]

  source

  • corvi@lemm.ee ⁨6⁩ ⁨months⁩ ago

    The problem is that type of phishing is pretty much unheard of these days. You’re so much more likely to run into a fake Microsoft SSO page. I see these every day at work, and if you’re not checking the URL, it’s often identical.

    So, the actual highest commandments are use MFA, read urls, and double check email senders.

    source

    • Rob@lemmy.world ⁨6⁩ ⁨months⁩ ago

      Use pass keys (where possible); that mitigates the issues you describe

      source
• RecallMadness@lemmy.nz ⁨6⁩ ⁨months⁩ ago

  good enough to trick even the savvy

  But not savvy enough to be still using last pass.

  source

  • leo@lemmy.linuxuserspace.show ⁨6⁩ ⁨months⁩ ago

    Ya know, that exact thought was in the back of my mind…

    source