By now you're probably on high alert whenever you receive a genuine phone call from someone you don't know. If it's not the usual “We're trying to contact you about your extended car warranty” recording, it's probably someone from “Windows” trying to get you to install a remote access program. Is. If they mix it up a bit and tell you they're from LastPass, yeah, it's the same old BS.

Ars Technica Report that phishing scammers have expanded their operations to impersonate the password saving service LastPass. The calls alert users that their account has been accessed from a new location, and that they only need a click or two to stop this potentially nefarious hacker. According to A warning from LastPass itselfFollow-up calls from real, live humans will then direct the user to provide their email address, where a phishing message will attempt to steal their real login information.

Once phishers have the master LastPass password, they immediately lock out the real user and gain access to whatever information is stored inside. This is a mother form of identity theft data, especially since a legitimate user is usually unable to access randomly generated passwords for dozens or hundreds of sites, including banking and medical information.

LastPass seems to have enough users now that it's become a frequent target for phishing scams, to say nothing of the insidious nature of all its personal data setup. The company has often been the target of high-profile hacks, In 2022 at the latest. The latest batch is targeting consumers themselves thanks to the proliferation of ready-made phishing kits such as CryptoChameleon.

LastPass representatives say they managed to shut down the site for the latest phishing attempt as of April 16, but it seems almost inevitable that the crooks will try again with another URL. head up