#lostpass

LastPass users account could be caught out by a phising attack.

LastPass is used to store user’s password in the cloud in an encrypted vault protected by a single username and password. This vault can be protected using two-factor authentication. A security researcher has released a tool call LostPass (available on GitHub) that allows an attacker to steal a LastPass user’s email, password, and even two-factor authentication code, giving full access to all…