arstechnica ,
@arstechnica@mastodon.social avatar

LastPass users targeted in phishing attacks good enough to trick even the savvy

Campaign used email, SMS, and voice calls to trick targets into divulging master passwords.

https://arstechnica.com/security/2024/04/lastpass-users-targeted-in-phishing-attacks-good-enough-to-trick-even-the-savvy/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

dustcircle ,
@dustcircle@mastodon.social avatar

@arstechnica Can never bring myself to use .
I use . FREE and SECURE

Bradcopter ,
@Bradcopter@mastodon.social avatar

@arstechnica LastPass can't help but catching every L

birdpoof ,
@birdpoof@universeodon.com avatar

@arstechnica
Spear-phishing is only getting worse thanks to AI, too. Everything is fine.

BrianPierce ,
@BrianPierce@mstdn.social avatar

@arstechnica

Key point is this: "companies and end users should always use multi-factor authentication to lockdown accounts when possible and ensure it’s compliant with the standard when available. available through push notifications or one-time passwords provided by text, email, or authenticator apps are better than nothing, but as events over the past few years have demonstrated, they are themselves easily defeated in credential phishing attacks"

bugmenot ,

@arstechnica solution: don't use lastpass

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • All magazines