When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.

This person would then send a phishing email, with a link to the fake LastPass site.

There, the victim would enter their master password, which would be relayed to the attackers.

Passwords

Image Credit: Shutterstock

Moments later, the victims would get locked out of their accounts, losing access to all other passwords.

Those are, almost always, malicious.

Such emails should be reported toabuse@lastpass.com, the company said.

ViaBleepingComputer

More from TechRadar Pro