When you purchase through links on our site, we may earn an affiliate commission.Heres how it works.
This person would then send a phishing email, with a link to the fake LastPass site.
There, the victim would enter their master password, which would be relayed to the attackers.
Image Credit: Shutterstock
Moments later, the victims would get locked out of their accounts, losing access to all other passwords.
Those are, almost always, malicious.
Such emails should be reported toabuse@lastpass.com, the company said.
ViaBleepingComputer