You might have seen <a href="https://www.gartner.com/en/newsroom/press-releases/2023-03-28-gartner-unveils-top-8-cybersecurity-predictions-for-2023-2024">this shocking prediction from Gartner:</a> by 2027, 75% of employees will acquire, modify or create technology outside IT&rsquo;s visibility &ndash; up from 41% in 2022.&nbsp;
Your employees rely on more SaaS tools than ever and not all of them are on your radar. &nbsp; 
From cloud apps and browser extensions to AI tools, today&rsquo;s workplaces move fast. And when anyone can implement a new app with little more than a credit card and a dream, you can be sure that very few of them are thinking about access or credential management. Consider this:&nbsp;
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Shadow IT and Shadow AI are expanding the attack surface, with unsanctioned tools introducing security gaps no one&rsquo;s monitoring.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">App bloat is costing real money &mdash; small businesses now pay for an average of 134 unused applications, and large organizations pay for 473.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Sensitive data is slipping through the cracks, with 38% of employees admitting they&rsquo;ve shared work information with unauthorized AI tools.&nbsp;&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Compliance is harder to maintain when there&rsquo;s no clear picture of who&rsquo;s accessing what, and from where.&nbsp;</li>
</ul>
Single sign-on (SSO) can help with your core apps-- the ones that you know about-- but it doesn&rsquo;t cover everything, especially those smaller, hidden apps. And for small and mid-sized businesses, controlling those can get expensive and time-consuming, fast.&nbsp;&nbsp;
That&rsquo;s where the security gaps start. Without a simple, customizable way to manage access, secure credentials and monitor app usage, it&rsquo;s easy to lose control. And that opens the door to risk from old accounts that still have access to sensitive info, to apps no one remembers signing up for.&nbsp;
It&rsquo;s no longer enough to secure passwords alone. Businesses need an approach to identity and access management that&rsquo;s as flexible, efficient, and user-friendly as the tools their employees actually use.&nbsp;
<div class="button-container"><a rel="noopener noreferrer" href="https://www.lastpass.com/resources/demo/password-and-identity-management" target="_blank"><button class="class lp-button--red-outline">Request a Demo</button></a></div>
<h2 class="p4" style="color: rgba(0, 0, 0, 0.85); margin: 0px 0px 10.7px;">What is Secure Access Experiences?&nbsp;&nbsp;</h2>
Secure Access Experiences is the LastPass answer to this growing access management crisis &mdash; an evolving approach designed to bring together essential capabilities into one intuitive experience. It helps you control who has access to what, based on your own policies &mdash; not just passwords. Whether your team is using approved tools or ones you didn&rsquo;t even know about, you&rsquo;ll get the visibility and control you need, all in one easy-to-use solution.&nbsp;
With Secure Access Experiences, you will be able to:&nbsp;
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Log in with ease: Securely manage how your team stores and uses passwords. Support for passkeys makes logging in even faster and safer.&nbsp;&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Control who gets access: Make sure the right people have access to the right apps, systems, and data&mdash;nothing more, nothing less. It&rsquo;s easy to set up and adjust as your business grows.&nbsp;&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">See what&rsquo;s happening: Know which apps your team is using, when, and how. Stay informed, spot issues early, and feel confident that everything&rsquo;s running smoothly.&nbsp;&nbsp;&nbsp;</li>
</ul>
<h2 class="p4" style="color: rgba(0, 0, 0, 0.85); margin: 0px 0px 10.7px;">Why do Secure Access Experiences matter?&nbsp;</h2>
As SaaS adoption grows and the lines between personal and professional tools blur, businesses need a smarter, simpler way to manage access &mdash; one that meets modern challenges head-on, without overwhelming teams or breaking the bank.&nbsp;&nbsp;
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Grows with your business: As your business adds more tools, people, and locations, LastPass makes it easy to keep everything secure without slowing you down.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Easy to manage, easier on your budget: Control access to all your tools from one place. Less hassle for you, and no need to invest in multiple systems.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Provides better protection, fewer headaches: Keep your business safe with strong, simple security&mdash;and make it easier to meet industry requirements along the way.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Simple for your team to use: When it&rsquo;s easy to use, your team actually uses it. That means stronger habits, less risk, and happier employees.&nbsp;</li>
</ul>
<h2 class="p4" style="color: rgba(0, 0, 0, 0.85); margin: 0px 0px 10.7px;">It starts with SaaS Monitoring and SaaS Protect.&nbsp;</h2>
You can&rsquo;t control what you can&rsquo;t see. The first capability in Secure Access Experiences was&nbsp;SaaS Monitoring. Now, SaaS Protect is available so that customers can take action on that visibility.&nbsp;&nbsp;&nbsp;
<img src="https://cdn.lputil.com/-/media/2b6fd9bba92346a8a0fcedeca39eed06.png?h=824&amp;w=1250" >
<p class="Paragraph SCXW34306727 BCX0" paraid="543943140" paraeid="{d0faa4d5-50fe-4037-b03d-c38b664a1e52}{232}" style="color: windowtext; background-color: transparent; margin-right: 0px; margin-bottom: 10.6667px; margin-left: 0px; padding: 0px;">With SaaS Monitoring and SaaS Protect, business owners and IT admins can finally see what apps are being used across their organization, spot risky behavior, and make informed decisions about which apps to allow, restrict, or retire. helping them detect unapproved tools, spot Shadow IT and Shadow AI, and optimize application investments &mdash; all without the need to deploy extra agents, integrations, or complexity.
<p class="Paragraph SCXW34306727 BCX0" paraid="713470910" paraeid="{d0faa4d5-50fe-4037-b03d-c38b664a1e52}{238}" style="color: windowtext; background-color: transparent; margin-right: 0px; margin-bottom: 10.6667px; margin-left: 0px; padding: 0px;">The future of easier visibility and control is here. Start your Secure Access Experiences journey today.&nbsp;
<div class="button-container"><a rel="noopener noreferrer" href="https://www.lastpass.com/resources/demo/password-and-identity-management" target="_blank"><button class="class lp-button--red-outline">Request a Demo</button></a></div>

Introducing Secure Access Experiences: Controlling the Chaos of Modern App Sprawl

Secure Access Experiences is the LastPass answer to this growing access management crisis.

Get LastPass Free

Create and store secure passwords for yourself, your team or business.

Why LastPass?

Remember fewer passwords and log in faster with our browser extension.

How LastPass works

LastPass zero-knowledge security model keeps your data private even from us.

Security Architecture

Compare LastPass competitors, plans, and features in one place

Compare LastPass

Overview

Password management

Save and autofill

Password generator

Password sharing

Passkeys

Dark web monitoring

Security dashboard

Key Features

Free LastPass Premium trial, no credit card required.

Free LastPass Business trial, no credit card required.

Let our experts help you find the right plan and successfully deploy LastPass.

Sync passwords across all devices, monitor password health, data breaches and much more.

Personal

Premium password management for family or group of 6 people.

Families

Personal Plans

30-day free LastPass Premium trial, no credit card required.

30-day free LastPass Families trial, no credit card required.

Limited to 1 device type and basic password management features.

Designed for businesses of all sizes, from small startups to enterprises.

Business

Gain complete visibility into your organization’s entire SaaS footprint.

Business Max

For single teams just getting started with password management.

Teams

Designed to keep your clients' credentials protected and private.

Business Plans

User management

SaaS Monitoring

SaaS Protect

Business sharing

Multifactor Authentication

Integrations

Single Sign-on

Identity management

For admins

Marketing teams

Legal teams

HR teams

Business leaders

IT admins

Solutions by role

Case studies

Webinars

Product demos

Events

Trust Center

Compliance Center

Security architecture

LastPass University

Resource Center

Pricing

Join the LastPass Partner Program to provide even more value to your customers.

Partner program overview

Managed Service Providers

Resellers

Cloud marketplaces

Technology Alliance Partners

LastPass Partner Program

Grow new revenue streams by meeting customer's security needs.

Looking for help or interested in becoming a LastPass partner? Get in touch with our partner team.

Connect with trusted LastPass Partners to support your security needs.

Partners

Self-service library of resources and guides for all LastPass products.

Support Center

Community forum

System status

Help

Personal support for all LastPass’ subscribed customers.

Support

Get LastPass free

Submit sales inquiry

Call sales

Request a demo

Find a partner

Contact sales

Log in

DNS spoofing attacks in 2025

What you need to know about DNS spoofing attacks and how you can stop them.

DNS Spoofing Attacks in 2025: What You Need to Know and How you Can Stop Them 

In the third episode of The Phish Bowl podcast, my cohost Mike Kosak and I discuss cyber activities and trends that we&rsquo;re tracking as cyber threat intelligence analysts. Every month we publish a rotating <a href="https://info.lastpass.com/threat-reports">regional report</a> that explores trends and threat activity, which serves as the foundation for the podcast and allows folks to dive deeper into threat activity. Last month, we covered Europe, and before that was the Asia-Pacific region.
This month, we are sticking with a &ldquo;North&rdquo; theme and talking about key findings from our recently published North America regional report and North Korean IT worker schemes. This month&rsquo;s special guests, Grayson North and Justin Timothy, Principal Threat Intelligence Consultants from GuidePoint Security&rsquo;s Research and Intelligence Team (GRIT), join us to talk about their cybercriminal research with a deep dive on infostealers (be sure to read our <a href="https://blog.lastpass.com/posts/joint-report-lastpass-guidepoint-security-infostealers">joint blog post</a>!) 
Important sidenote: You may judge us for our musical hot takes, but don&rsquo;t knock &lsquo;em &lsquo;til you try &lsquo;em. Mike&rsquo;s firm opinion that Alice in Chains is the best grunge band may get some pushback from the Nirvana fans out there. And be warned that songs from the K-Pop Demon Hunter movie are phenomenal bops that will get stuck in your head, guaranteed.
<iframe width="560" height="315" src="https://www.youtube.com/embed/gv5iip8dKAs?si=qBO6gk41KVM7P8t5" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" referrerpolicy="strict-origin-when-cross-origin"></iframe>
North America remains the top global target
*Note: While North America is geographically composed of multiple countries, this report focuses exclusively on the United States and Canada. This narrowed scope is intentional and based on several considerations, including data availability and consistency, audience, and scope management.
North America is the top targeted region globally and faces a significant, pervasive threat from cyberespionage and financially motivated attacks. It&rsquo;s an attractive target due to its strong economy, extensive digital infrastructure, and large consumer market. North America was the second most investigated region of all reported incidents in 2024. We wanted to highlight two key trends from this report: the pervasive nature of ransomware threats and the steep costs associated with data breaches in the US. 
The US was by far the most targeted region by ransomware in H1 2025. The US experienced over 2,000 attacks, while Canada had 249 attacks. GuidePoint Security&rsquo;s report on <a href="https://www.guidepointsecurity.com/resources/grit-q2-2025-ransomware-and-cyber-threat-report/">ransomware attacks in 2025 Q2</a> backed up this trend too, reporting that about 50% of ransomware attacks targeted the US. Notably, North American victims listed on ransomware data leak sites (DLS&rsquo;s) were primarily small and medium sized businesses (SMBs), indicating attackers&rsquo; shift from larger to smaller enterprises. SMBs are typically seen as low-hanging fruit due to their historically weaker security infrastructure and lower cybersecurity budgets compared to larger entities. 
We also wanted to call out the cost associated with data breaches. IBM recently published its <a href="https://www.ibm.com/reports/data-breach">Cost of a Data Breach Report</a>, including costs associated with breach-related detection and escalation, notification, post-breach response and lost business. IBM found the cost of a breach in the US grew to more than $10 million, driven in part by steeper regulatory penalties and rising detection and escalation costs. This is in stark contrast compared to the global average cost of a data breach, which fell to $4.88 million, and the average cost of a data breach in Canada was $4.66 million. 
North Korean IT worker scheme
To raise funds for the North Korean regime, a state-sponsored plan has DPRK operatives infiltrate Western companies as employees to gain access to intellectual property, steal cryptocurrency, and earn salary money for the regime. Typically, these operatives will use real Americans they recruit (or insiders of whichever country they&rsquo;re targeting) to set up laptop farms and steal identities so these North Korean workers can work from abroad but make it appear as if they were based in the US. 
This sounds like a lot of work for a country to generate, but it is quite lucrative, especially considering North Korea&rsquo;s dismal economic outlook &ndash; thanks to international sanctions in attempts to curb its nuclear program and a stagnant economy (apart from its apparent thriving wig industry, according to Mike). 
The use of AI is also a key element to these operations to help make them more convincing. They use AI to write resumes and eliminate grammatical or spelling errors, create AI-generated images on LinkedIn, use deepfake software to cover/obscure their real faces in online interviews, and mimic cultural fluency. 
This scheme puts companies at risk of violating sanctions when they unknowingly hire a DPRK worker. A good example is <a href="https://blog.knowbe4.com/our-interview-of-a-north-korean-fake-employee">KnowBe4</a> who has been upfront and transparent about their experiences detecting fake North Korean employees and job applicants. They have shared campaign details including tactics, techniques, and procedures (TTPs) so other companies can protect themselves against this threat. 
Digital identity theft drives cybercrime 
LastPass Threat Intelligence, Mitigation, and Escalations (TIME) and GuidePoint Security&rsquo;s GRIT Threat Intelligence teams recently published a <a href="https://www.guidepointsecurity.com/resources/grit-q2-2025-ransomware-and-cyber-threat-report/">joint report</a> to highlight the infostealer threat. Grayson and Justin from GuidePoint Security joined us as special guests to dive into what makes infostealers particularly dangerous, how they operate in the cybercriminal ecosystem, and a couple of things you can do immediately to shore up defenses against infostealers. Check out the <a href="https://www.guidepointsecurity.com/blog/the-rise-of-infostealers-identity-theft-fuels-cybercrime-economy/">full report</a> for more in-depth analysis.
Infostealers have been a major contributing factor driving cybercrime activity. It&rsquo;s not unique to North America, but credential harvesting activity is widely prevalent, impacting <a href="https://www.ibm.com/thought-leadership/institute-business-value/report/2025-threat-intelligence-index">40% of reported incidents</a> in the region, according to IBM. Between stealers&rsquo; high attack volume and growing sophistication, this threat will remain one of the key challenges to securing identity.&nbsp;
Browser targeting is the natural progression of credential stealing malware, so infostealers are the modern equivalent. Everything we do is available via Software-as-a-Service (SaaS), so it makes sense to go after the credentials for those services. Something else Grayson and Justin highlighted was that infostealers are increasingly going after session tokens. We&rsquo;ve seen threat actors talk about this as passkeys become more common and they are seen as the next natural target to maintain access to unauthorized systems.
How to protect yourself against infostealers? 
Justin and Grayson shared some suggestions on how folks can do more than the bare minimum to protect your accounts. As they pointed out, the human element is the weakest link in cybersecurity. The odds are stacked against us, but if we do more than just the basics, oftentimes that&rsquo;s enough to prevent being the victim of a cyberattack. 
<ul>
 <li>Use a password vault: That prevents whole browser impact that threat actors have and cripples the effect infostealers can have. It doesn&rsquo;t mitigate it completely, but it is a step in the right direction.</li>
 <li>Implementing MFA: Threat actors frequently can login with stolen credentials and access accounts without additional layers of security.</li>
</ul>
Hackers can breach and leverage anybody&rsquo;s credentials in an attack. Even if an employee isn&rsquo;t the ultimate intended target, once hackers have gained unauthorized access to a system, they can move laterally or target downstream clients. That&rsquo;s why it&rsquo;s critical that all employees&rsquo; accounts and credentials are protected.
Listen to the full episode&nbsp;&nbsp;
We&rsquo;re glad you&rsquo;re coming back for more cyber threat intelligence substance and hope you come away from these episodes with some new knowledge (or will at least give K-Pop Demon Hunters a try, if only for the catchy songs). 
<ul>
 <li>Listen to Episode 3 of The Phish Bowl wherever you get your podcasts:&nbsp;&nbsp;
 <ul>
 <li><a rel="noopener noreferrer" href="https://www.youtube.com/@LastPass/podcasts" target="_blank">YouTube</a>&nbsp;</li>
 <li><a rel="noopener noreferrer" href="https://open.spotify.com/show/1TQiFDk9acmkfp1sTFN1yX" target="_blank">Spotify</a>&nbsp;</li>
 <li><a rel="noopener noreferrer" href="https://podcasts.apple.com/podcast/id1828511920" target="_blank">Apple</a>&nbsp;</li>
 </ul>
 </li>
 <li>Subscribe for monthly threat intel deep dives.&nbsp;</li>
 <li>Access LastPass's <a href="https://info.lastpass.com/threat-reports">Regional Report</a> for detailed analysis of recent North American trends and activity.&nbsp;</li>
 <li>Check out the <a rel="noopener noreferrer" href="https://blog.lastpass.com/categories/lastpass-labs" target="_blank">LastPass Labs blog</a> for more insights.&nbsp;</li>
</ul>
See you next month to talk about more threat environment updates in Asia-Pacific, along with a corresponding regional report!

North American Cyber Threats, Infostealers, and North Korean IT Workers: What We Covered in the Third Episode of The Phish Bowl

In the third episode of The Phish Bowl podcast, my cohost Mike Kosak and I discuss cyber activities and trends that we’re tracking as cyber threat intelligence analysts. This month, we are talking about key findings from our recently published North America regional report and North Korean IT worker schemes. This month’s special guests from GuidePoint Security’s Research and Intelligence Team (GRIT) join us to talk about their cybercriminal research with a deep dive on infostealers 

North American Cyber Threats, Infostealers, and North Korean IT Workers: What We Covered in the Third Episode of The Phish Bowl 

How to protect yourself from malvertising in 2025

AI is making malvertising smarter, deadlier, and harder to ignore in 2025.

How to Protect Yourself from Malvertising in 2025 (Before It Costs You Everything) 

Supply chain attacks

How attackers target the platforms you trust and what you can do about it.

Supply Chain Attacks: How Attackers Target the Platforms You Trust and What You Can Do About It

 Here's How to Reset Your Windows 10 Password Like a Pro

If you’re still on Windows 10 and want to reset your forgotten password, follow the easy steps below to reclaim your PC. 

Still Using Windows 10? Here's How to Reset Your Windows 10 Password Like a Pro

Is your digital identity safe from AI-driven attacks or already in the wrong hands? 

We explore AI driven phishing attacks and how they exploit our trust in the voices of authoritative sources.  

Is Your Digital identity Safe from AI-Driven Attacks or Already in the Wrong Hands?

The LastPass Threat Intelligence, Mitigation, and Escalation (TIME) team is tracking an ongoing, widespread infostealer campaign targeting Mac users through fraudulent GitHub repositories designed to trick potential victims into installing what is presented as various companies&rsquo; software for MacOS. In the case of LastPass, the fraudulent repositories redirected potential victims to a repository that downloads the Atomic infostealer malware. The threat actors are using Search Engine Optimization (SEO) to deliver links to their malicious sites at the top of search pages, including Bing and Google. This campaign appears to be targeting a range of companies, including tech companies, financial institutions, password managers, and more. Further information on the targeted companies can be found in the Indicators of Compromise (IoCs) at the end of the blog. 
We are writing this blog post to raise awareness of the campaign and protect our customers while we continue to actively pursue takedown and disruption efforts, and to also share indicators of compromise (IoCs) to help other security teams detect cyber threats. <a href="https://medium.com/deriv-tech/brewing-trouble-dissecting-a-macos-malware-campaign-90c2c24de5dc">This excellent blog post by Dhiraj Mishra</a> describes a similar campaign targeting another software that bears many of the same hallmarks as the campaign we are addressing here. We are actively monitoring this campaign and will update our blog post with any new information.
<img src="https://www.lastpass.com/-/media/1fc59436e80e445f98293582270f57dc.png?h=139&amp;w=572" >
<h2>Malicious GitHub Pages Claiming to Offer LastPass Removed</h2>
LastPass tracked two fraudulent GitHub sites targeting our customers; these sites were immediately submitted for takedown and are now inactive.
<img src="https://www.lastpass.com/-/media/3302584d9c1c45a481122c73b9dd3d02.png?h=305&amp;w=732" >
Screen Capture of SEO-driven Referral to Malicious Software
<h2>Campaign Details</h2>
<ul class="ul1" style="color: #000000;">
 <li class="li1" style="color: #101010; margin: 0px;">Two GitHub pages impersonating LastPass were posted to GitHub by the user &ldquo;modhopmduck476&rdquo; on 16 September. Both pages included links allegedly to &ldquo;Install LastPass on MacBook&rdquo; that redirected to the same page: hxxps://ahoastock825[.]github[.]io/.github/lastpass.
 <ul class="ul2">
 <li class="li1" style="color: #101010; margin: 0px;">Notably, the GitHub pages appear to be created by multiple GitHub usernames to get around takedowns.</li>
 <li class="li1" style="color: #101010; margin: 0px;">The GitHub page headlines include &ldquo;name of company&rdquo; and Mac-related terminology (i.e. MacOS, Mac, Premium on Macbook) since that&rsquo;s what they are targeting.</li>
 </ul>
 </li>
</ul>
<img src="https://www.lastpass.com/-/media/8f42d1381d444e3fa5717b408fced26f.png?h=857&amp;w=797" >
Screen Capture of the LastPass Impersonation Page
<ul class="ul1" style="color: #000000;">
 <li class="li1" style="color: #0e0e0e; margin: 0px;">This site then redirects to the URL &ldquo;macprograms-pro[.]com/mac-git-2-download.html&rdquo;.</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">That site instructs users to copy and paste the following command into their Mac&rsquo;s terminal:</li>
</ul>
<img src="https://www.lastpass.com/-/media/d14712e4d02c4c758dbee33b42b0449d.png?h=28&amp;w=567" >
<img src="https://www.lastpass.com/-/media/d2970b4ef51e4f05bfd3e83465d8017b.png" >
Screen Capture of the Secondary Site
<ul class="ul1" style="color: #000000;">
 <li class="li1" style="color: #0e0e0e; margin: 0px;">The command then conducts a CURL request to a base64 encoded URL which decodes to: bonoud[.]com/get3/install.sh</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">This site then delivers the following payload:</li>
</ul>
<img src="https://www.lastpass.com/-/media/c4de1d8d825f4e8c8726a843eb753e3a.png?h=43&amp;w=1057" >
<ul class="ul1" style="color: #000000;">
 <li class="li1" style="color: #0e0e0e; margin: 0px;">This in turn downloads the &ldquo;Update&rdquo; payload to the Temp directory. The Update payload is in fact Atomic stealer (aka AMOS malware). Atomic stealer has been available since at least April 2023. The malware has previously been associated with financially motivated cybercrime groups.</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">LastPass will continue to monitor this campaign and provide updates as warranted.</li>
</ul>
Indicators of Compromise (IoCs)
URLs: 
<ul class="ul1" style="color: #000000;">
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/lastpass-on-macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/LastPass-on-MacBook/lastpass-premium-mac-download</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">ahoastock825[.]github[.]io/.github/lastpass</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">macprograms-pro[.]com/mac-git-2-download.html</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">bonoud[.]com/get3/install.sh</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">bonoud[.]com/get3/update</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Zengo-Wallet-Desktop-App-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/1password-on-Macbook-Desktop</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/1Password-Premium-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/ActiveCampaign-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/ActiveCampaign-MacBook-Desktop-App</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/After-Effects-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Audacity-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Auphonic-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Basecamp-App-macOS-Installation</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/BetterSnapTool-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Biteable-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Bitpanda-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Bitsgap-Download-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Blog2Social-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Blue-Wallet-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Bonkbot-On-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Carbon-Copy-Cloner-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Carbon-Copy-Cloner-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Charles-Schwab-Desktop-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Citibank-on-MacBook-Desktop-App</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/CMC-Markets-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Confluence-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Coolors-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/DaVinci-Resolve-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/DefiLlama-on-Mac-Desktop-App</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Desktop-Clockology-Mac-Os</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Desygner-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Docker-MacBook-Desktop-App</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Dropbox-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/EigenLayer-Desktop-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/EigenLayer-Desktop-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/EigenLayer-Desktop-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/E-TRADE-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Fidelity-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Fliki-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Freqtrade-Bot-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Freshworks-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Gemini-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/GMGN-AI-Desktop-App-On-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Gunbot-Desktop-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Hemingway-Editor-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/HeyGen-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Hootsuite-MacBook-Desktop-App</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/HTX-App-on-MacBook-Download</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Hypertracker-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/IRS-Desktop-App-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/KeyBank-on-Mac-Desktop</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Lightstream-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Loopback-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Maestro-Bot-Desktop-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Melon-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Metatrader-5-Download-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Metricool-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Mixpanel-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Mp3tag-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Mural-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/NFT-Creator-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/NotchNook-Download-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Notion-Download-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Obsidian-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Onlypult-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Pendle-Finance-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Pepperstone-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Pipedrive-on-Mac-Desktop-App</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Plus500-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Privnote-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/ProWritingAid-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Publer-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Raycast-App-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Raycast-Download-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Reaper-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/RecurPost-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Renderforest-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Rippling-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Riverside-fm-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Robinhood-Desktop-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Rug-AI-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Sage-Intacct-on-Mac-Desktop-App</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Salesloft-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/SentinelOne-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Shippo-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Shopify-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/SocialPilot-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Soundtrap-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/StreamYard-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/SurferSEO-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Thunderbird-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/TweetDeck-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Uphold-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Uphold-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Veeva-CRM-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Viraltag-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/VSCO-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Vyond-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Webull-on-Macbook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Xai-Games-App-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/XSplit-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Zealy-Desktop-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Zencastr-Desktop-on-Mac</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Zenefits-on-MacBook</li>
 <li class="li1" style="color: #0e0e0e; margin: 0px;">github[.]com/Zotero-7-on-MacBook</li>
</ul>
SHA256 Hash:
<ul>
 <li class="p1" style="color: #0c0c0c; margin-right: 0px; margin-left: 0px;">e52dd70113d1c6eb9a09eafa0a7e7bcf1da816849f47ebcdc66ec9671eb9b350 (Atomic Stealer)</li>
</ul>

Large-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware

We're tracking an ongoing, widespread infostealer campaign targeting Mac users through fraudulent GitHub repositories. 

Could a cross site scripting attack empty your wallet without you knowing?

An XSS attack occurs when an attacker injects malicious JavaScript into content you see on a site.  

Could a Single XSS Attack Empty Your Wallet Without You Knowing?

Today we&rsquo;re proud to announce that LastPass has successfully completed an independent assessment under the Australian Signals Directorate&rsquo;s <a href="https://www.cyber.gov.au/irap">Infosec Registered Assessors Program</a> (IRAP).&nbsp;&nbsp;
This milestone marks a significant step forward in our commitment to supporting Australian government agencies with secure, compliant, and locally hosted identity and access management solutions.&nbsp;
<h2 class="p2" style="color: rgba(0, 0, 0, 0.85); margin: 0px 0px 19.9px;">What Is IRAP and Why It Matters&nbsp;</h2>
IRAP is Australia&rsquo;s highest standard for evaluating the cybersecurity posture of ICT systems, cloud services, and gateways. It provides organisations with access to accredited assessors who independently evaluate systems against the <a href="https://www.cyber.gov.au/resources-business-and-government/essential-cybersecurity/ism">Australian Government Information Security Manual (ISM).</a>&nbsp;&nbsp;
Developed by the Australian Signals Directorate (ASD), the ISM reflects expert insights and national security priorities. Regularly updated to reflect emerging threats, the ISM includes cybersecurity principles, practical guidelines, and terminology to ensure clarity and consistency across different sectors. Whether securing national infrastructure or corporate networks, the ISM is a foundational tool for building resilient cybersecurity defences.&nbsp;
&nbsp;
Completing an IRAP assessment demonstrates alignment with stringent security controls and best practices, especially critical for handling sensitive government data. This assessment reviewed LastPass cloud architecture, data protection mechanisms, access controls, and operational security practices to ensure alignment with the ISM&rsquo;s stringent requirements.&nbsp;
For LastPass, this assessment validates our ongoing investment in security, privacy, and compliance in Australia:&nbsp;&nbsp;
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Local infrastructure: LastPass data residency in Australia ensures sensitive information remains within national borders, supporting compliance with <a href="https://www.oaic.gov.au/privacy/privacy-legislation/the-privacy-act">data sovereignty requirements</a>.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Dedicated expertise: Our regional team includes security professionals who understand the unique needs of Australian government agencies and enterprises.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Security best practices: From <a href="https://www.lastpass.com/security/zero-knowledge-security">zero-knowledge encryption</a> to <a href="https://www.lastpass.com/trust-center">continuous monitoring and threat detection</a>, LastPass is built to meet global and local security expectations.&nbsp;</li>
</ul>
<h2 class="p2" style="color: rgba(0, 0, 0, 0.85); margin: 0px 0px 19.9px;">What This Means for Our Customers&nbsp;</h2>
For Australian government agencies, selecting an IRAP-assessed solution is essential to meeting regulatory requirements and protecting sensitive data. Here&rsquo;s why:&nbsp;
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Enhanced trust for Australian government and enterprises: Government agencies and regulated industries in Australia can now confidently consider LastPass as part of their security ecosystem, knowing it has met the rigorous standards of an IRAP assessment.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Independent validation of security posture: The IRAP assessment provides third-party validation of our security controls, reinforcing our commitment to transparency and continuous improvement.&nbsp;</li>
</ul>
<ul class="ul1" style="color: #000000;">
 <li class="li3" style="color: rgba(0, 0, 0, 0.85); margin: 0px;">Alignment with Australian cybersecurity standards: By aligning with the ISM, LastPass demonstrates its dedication to meeting local compliance requirements and supporting sovereign cybersecurity initiatives.&nbsp;</li>
</ul>
<h2 class="p2" style="color: rgba(0, 0, 0, 0.85); margin: 0px 0px 19.9px;">Built for Security, Designed for People&nbsp;</h2>
Trusted by millions of users and thousands of organisations worldwide, with IRAP now complete, we&rsquo;re proud to extend that trust to Australian government agencies and critical infrastructure providers.&nbsp;
And as threats evolve, so do we. We&rsquo;ll continue to invest in local infrastructure, compliance initiatives, and partnerships that help our customers stay ahead of risk while keeping their data safe, accessible, and under control.&nbsp;
Whether you&rsquo;re a government agency, critical infrastructure, SMB, or enterprise organisation, LastPass is ready to support your mission with the tools and trust you need.&nbsp;
&nbsp;
To learn more about how LastPass supports Australian government agencies, <a href="https://www.lastpass.com/contact-sales">reach out to our team</a>.&nbsp;

LastPass Completes IRAP Assessment

Learn how we're strengthening our commitment to Australian government security standards

LastPass Completes IRAP Assessment: Strengthening Our Commitment to Australian Government Security Standards

The simple steps to resetting your Spectrum account, router, and Wi-Fi passwords like a pro

As Spectrum sweeps the nation with nex[..]

The Simple Steps to Resetting Your Spectrum Account, Router, and Wi-Fi Passwords Like a Pro 

what are romance scams?

We explore romance scams and answer the most-asked questions about them, answers that could protect you and your loved ones.

Romance Scams: Why Can’t We Trust the Words Behind the Sweetest Lies? 

One chapter in the saga of infostealer malware has ended&mdash;at least for now&mdash;after a global law enforcement takedown of Lumma Stealer in mid-May. US, European, and Japanese authorities, with the help of tech companies including Microsoft and Cloudflare, took down, suspended, and blocked approximately 2,300 malicious domains that made up part of the infostealer&rsquo;s backbone. The FBI also seized domains that served as login panels allowing other criminals to access and use the infostealer. Although, this seizure is intended to effectively prevent criminals from being able to access Lumma to compromise computers and steal data, the overall stealer threat will remain prevalent for the foreseeable future. 
(Interested in learning more about the infostealer threat outlook? Read the LastPass TIME team&rsquo;s threat predictions and analysis on <a href="https://blog.lastpass.com/posts/2025-cybersecurity-trends">what direction infostealers and other threats are heading</a>.) 
<h2>What is Lumma?</h2>
 
Lumma Stealer, also known as LummaC2, dominated the expanding stealer market with significant campaigns since it emerged as early as late 2022. Since its initial release, Lumma&rsquo;s developers have released multiple upgraded versions of the software. Before the malware-as-a-service (MaaS) platform was dismantled, the FBI linked Lumma to around <a href="https://www.malwarebytes.com/blog/news/2025/05/lumma-information-stealer-infrastructure-disrupted">10 million infections</a> globally. Lumma&rsquo;s follow-on attacks involving stealing credentials, cryptocurrency data, and credit card information have resulted in an estimated <a href="https://cyberscoop.com/lumma-infostealer-widespread-victims/">$36.5 million USD</a> in credit card theft in 2023. The malware hit individuals and a wide range of industries, including Fortune 500 companies, airlines, universities, banks, and hospitals. 
What makes this stealer particularly effective is that it continues to evolve to bypass security layers even as defenders are responding to the threat. On top of grabbing browser-stored passwords and cookies, it&rsquo;s also capable of extracting autofill data, email credentials, File Transfer Protocol (FTP) data, and two-factor authentication tokens and backup codes. Using its MaaS platform, its creators sold access to the malware on multiple underground markets and platforms like Telegram. 
<h2>What comes next?</h2>
 
This takedown is a major win for law enforcement and will help disrupt the initial access broker ecosystem in the near term. However, this is an ecosystem that has demonstrated its resilience again and again. The number of existing infostealer families, the open access to numerous source codes of previous infostealers, and the constant demand create a lucrative environment with very low barriers to entry. Given the resiliency of this market, other infostealer will likely quickly step in and fill in the gaps left after the Lumma takedown. 
A similar pattern previously played out with other similar takedowns. On October 28, 2024, Operation Magnus disrupted the RedLine and META infostealers. RedLine was a significant stealer last year up until the takedown, after which Lumma grew in popularity and took over a portion of the market share previously held by RedLine. Redline infected 9.9 million hosts, or 43% of all infostealer infections observed by Flashpoint in 2024. The next four most-prolific infostealers in 2024, including RisePro, SteaC, Lumma Stealer, and Meta Stealer, infected a <a href="https://cyberscoop.com/infostealers-cybercrime-surged-2024-flashpoint/">combined 7 million hosts</a>. 
We expect to see something similar following the Lumma Stealer takedown operation. The disruption effect following takedown is real, but there are still some new infections and logs for sale that were likely stolen before the infrastructure was taken down. Additionally, just because Lumma&rsquo;s infrastructure was dismantled, a lot of the data it stole likely continues to live on the dark web&mdash;thanks to the cybercriminal ecosystem that resells this information. Additionally, <a href="https://blog.checkpoint.com/security/lumma-infostealer-down-but-not-out/">CheckPoint</a> reported Lumma&rsquo;s developers are already trying to rebuild and restart their operations, which may or may not be successful.&nbsp;As SpyCloud&rsquo;s <a href="https://www.linkedin.com/posts/thilligoss_lummatakedown-lummareallynowork-stealc-activity-7332888157480198146-u94p">Trevor Hilligoss shared</a>, daily new Lumma infections have trended downward following the takedown but not as much as expected. Continued monitoring will be necessary to determine the takedown&rsquo;s impact. 
Long-standing groups such as Vidar and Stealc are good examples of this, but other newer families, such as Acreed, will also be well positioned to increase their market share. <a href="https://www.bleepingcomputer.com/news/security/russian-market-emerges-as-a-go-to-shop-for-stolen-credentials/">ReliaQuests</a> already reported Acreed is rapidly gaining traction following the Lumma takedown. <a href="https://webz.io/dwp/acreed-infostealer-everything-we-know-so-far/">Over 4,000 logs</a> stolen by Acreed were reportedly uploaded to the Russian Market within its first week of operations.&nbsp;Nexus has also gained some traction over the last week in Lumma&rsquo;s absence. Further, former affiliates and/or administrators associated with Lumma itself may split off to create their own offerings.

<img src="https://cdn.lputil.com/-/media/ffef2d4ef9d544babc2169a6d0274059.jpg?h=310&amp;w=624" >&nbsp;
Daily new LummaC2 infections (Source: Trevor Hilligoss)
<h2>How to protect yourself against infostealers</h2>
The threat from infostealers will remain very real for the foreseeable future and continue to adapt. Oftentimes, stealers are used in indiscriminate campaigns. Additionally, the sheer volume of data that has been dumped on the internet is immense. That means anyone is fair game and should take action to protect themselves following that assumption that they could be targeted. 
<ul>
 <li>Use strong, unique passwords for every account. This will prevent credential stuffing attacks, which is a common tactic where threat actors insert stolen usernames and passwords. That way, if one password is exposed, it won&rsquo;t give access to all your other accounts where you reuse the same password. Also, consider using a password manager to securely and conveniently store them.</li>
 <li>Enable MFA on your accounts. While this measure isn&rsquo;t failproof on its own, it adds an additional layer of defense and makes you a harder target.</li>
 <li>Be on guard for phishing attempts. Infostealers often spread through phishing emails and malicious downloads. </li>
 <li>Check HaveIBeenPwned to monitor potential exposure if you&rsquo;re worried you may have been infected by an infostealer. </li>
</ul>

What the Lumma stealer takedown means for the infostealer market and your personal data

Lumma Stealer, also known as LummaC2, dominated the expanding stealer market with significant campaigns since it emerged as early as late 2022

Dark Side of the Lumma: What the Lumma stealer takedown means for the infostealer market and your personal data

Passkey vs Password: Which is More Secure? | LastPass

Explore the differences between passkeys and passwords. Learn how LastPass enhances security and simplifies access with advanced authentication methods.

Blog

Blog

Recent

News & Insights

Cybersecurity

Product Tutorials

Threat Intel

Product Updates

Tips And Tricks

Introducing Secure Access Experiences: Controlling the Chaos of Modern App Sprawl

Dark Side of the Lumma: What the Lumma stealer takedown means for the infostealer market and your personal data

Passkeys Explained: Will Passwords Ever Go Away?

DNS Spoofing Attacks in 2025: What You Need to Know and How you Can Stop Them

North American Cyber Threats, Infostealers, and North Korean IT Workers: What We Covered in the Third Episode of The Phish Bowl

Subscribe & Save 20% off Premium or Families plans

How to Protect Yourself from Malvertising in 2025 (Before It Costs You Everything)

Supply Chain Attacks: How Attackers Target the Platforms You Trust and What You Can Do About It

Still Using Windows 10? Here's How to Reset Your Windows 10 Password Like a Pro

Is Your Digital identity Safe from AI-Driven Attacks or Already in the Wrong Hands?

Large-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware

Could a Single XSS Attack Empty Your Wallet Without You Knowing?

LastPass Completes IRAP Assessment: Strengthening Our Commitment to Australian Government Security Standards

The Simple Steps to Resetting Your Spectrum Account, Router, and Wi-Fi Passwords Like a Pro

Romance Scams: Why Can’t We Trust the Words Behind the Sweetest Lies?