Home / Technology / Password Managers Under Attack: Phishing Scams Emerge
Password Managers Under Attack: Phishing Scams Emerge
15 Jul
Summary
- Phishing emails mimic LastPass and Bitwarden to steal credentials.
- Fake DocuSign documents used to trick users into fraudulent sites.
- Neither password manager was breached; attack relies on domain spoofing.
A recent phishing campaign is targeting users of prominent password managers LastPass and Bitwarden. Attackers are sending emails that appear to originate from legitimate-sounding newsletter addresses, such as "hello@lastpassnewsletter.com" and "hello@bitwardennewsletter.com". These fraudulent messages inform recipients about updated security policies and prompt them to review and sign a DocuSign document.
The phishing emails contain a link that redirects users to fake compliance websites, like lastpasscompliance[dot]com and bitwardencompliance[dot]com. These domains have been identified as malicious by security firms and are now offline. The core of this attack involves domain spoofing, where criminals register similar-looking domains to deceive unsuspecting users.
It is crucial to note that neither LastPass nor Bitwarden experienced any security breaches. Their internal systems and customer password data remain secure. This incident highlights the persistent threat of phishing and the importance of vigilant cybersecurity practices, such as meticulously checking sender details and website addresses before interacting with sensitive information.
