arstechnica ,
@arstechnica@mastodon.social avatar

LastPass users targeted in phishing attacks good enough to trick even the savvy

Campaign used email, SMS, and voice calls to trick targets into divulging master passwords.

https://arstechnica.com/security/2024/04/lastpass-users-targeted-in-phishing-attacks-good-enough-to-trick-even-the-savvy/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

bugmenot ,

@arstechnica solution: don't use lastpass

BrianPierce ,
@BrianPierce@mstdn.social avatar

@arstechnica

Key point is this: "companies and end users should always use multi-factor authentication to lockdown accounts when possible and ensure it’s compliant with the standard when available. available through push notifications or one-time passwords provided by text, email, or authenticator apps are better than nothing, but as events over the past few years have demonstrated, they are themselves easily defeated in credential phishing attacks"

birdpoof ,
@birdpoof@universeodon.com avatar

@arstechnica
Spear-phishing is only getting worse thanks to AI, too. Everything is fine.

Bradcopter ,
@Bradcopter@mastodon.social avatar

@arstechnica LastPass can't help but catching every L

dustcircle ,
@dustcircle@mastodon.social avatar

@arstechnica Can never bring myself to use .
I use . FREE and SECURE

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • All magazines
    •