UPDATE: The fraudulent app was removed from the Apple App Store on February 8. We will continue to monitor for fraudulent applications and take appropriate action as necessary.

LastPass would like to alert our customers to a fraudulent app attempting to impersonate our LastPass app on the Apple App Store. The app in question is called “LassPass Password Manager” and lists Parvati Patel as the developer.  The app attempts to copy our branding and user interface, though close examination of the posted screenshots reveal misspellings and other indicators the app is fraudulent. 

 <img src="https://cdn.lputil.com/-/media/2299378b3e29478b9289e964034e36ca.png" >

<img src="https://cdn.lputil.com/-/media/9bfca526099a43af8705d4ed8bbdee86.png" >

We are raising this to our customers’ attention to avoid potential confusion and/or loss of personal data. For clarification, below we have included the URL for the fraudulent app as well as the link to our legitimate app so that customers can verify they are downloading the correct LastPass application for themselves until the fraudulent app is taken down. 

Rest assured, LastPass is actively working to get this application taken down as soon as possible, and will continue to monitor for fraudulent clones of our applications and/or infringements upon our intellectual property. 

Fraudulent App 

https://apps.apple[.]com/us/app/lasspass-password-manager/id6473945355

Developer: Parvati Patel

1 Rating

Legitimate LastPass App

https://apps.apple[.]com/us/app/lastpass-password-manager/id324613447

Developer: LogMeIn, Inc. 

52.3K Ratings

Warning: Fraudulent App Impersonating LastPass Currently Available in Apple App Store

UPDATE: The fraudulent app was removed from the Apple App Store on February 8. We will continue to monitor for fraudulent applications and take appropriate action as necessary.</e[..]

In an ever-evolving threat environment, staying up to date with the latest cybersecurity trends is not a choice but a necessity. The year 2023 has shown us some interesting developments in the cybersecurity domain, driven by technological advancements, corporations returning to the office post-pandemic, and a global uptick in cyber threats. This is the second post of two that delves into the significant cybersecurity trends of 2023 and what it entails for individuals and businesses alike.

Frontline Defense: Security Awareness Training 

The human factor remains a significant vulnerability in cybersecurity. Ongoing security awareness training is crucial for equipping individuals with the knowledge and skills to recognize and mitigate cyber threats.

Security Awareness Training (SAT) is crucial in minimizing the risks associated with human error in cybersecurity. Here are some real-world examples and insights regarding Security Awareness Training:
<ol>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="15" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">The Importance of SAT Across Industries: Despite the technical nature of cybersecurity, human error remains a significant factor in many security incidents. Expert Insights highlights that everyone is susceptible to mistakes regardless of their position in a tech company, emphasizing the critical role of SAT in minimizing risks associated with lack of knowledge and training.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="15" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Cybersecurity Awareness Month 2023: Cybersecurity Awareness Month (CSAM) 2023 spotlighted four core security behaviors: using strong passwords, employing a password manager, recognizing and avoiding phishing attempts, and regularly updating and patching systems. These focal points reflect the fundamental principles that are often reinforced through SAT programs.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="15" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Key Elements of SAT Programs: MetaCompliance outlines five essential components for planning a SAT program in 2023: initiating and sustaining training with automation, ensuring continuity and scheduling, making the training engaging, tracking progress, and measuring effectiveness. These elements are geared towards making SAT programs more effective and beneficial to organizations.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="15" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">2023 Security Awareness Report by SANS: SANS Security Awareness Report 2023 provides a global guide to cyber awareness and managing human risk. The report is aimed at empowering Security Awareness teams with industry benchmarking, program growth, and career development through valuable data, insights, and actionable steps.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="15" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Emerging Phishing Threats in SAT: SAT programs in 2023 are adapting to emerging phishing threats like vishing (voice phishing) and smishing (SMS phishing). Training programs are evolving to educate users about these new threats, and how to recognize and respond to them. The rise of such novel phishing methods underscores the need for continuous learning and adaptation in SAT programs to stay ahead of cybercriminals.</li>
</ol>
These examples and insights underscore the dynamic nature of Security Awareness Training, reflecting its critical role in bolstering an organization's cybersecurity posture. Through a combination of continuous education, real-world simulations, and evolving training content, SAT aims to empower individuals and organizations against a wide array of cyber threats.
<h3>Zero Trust, In Practice</h3>
The Zero Trust Architecture (ZTA) paradigm has gained traction, emphasizing a ‘never trust, always verify’ approach. Implementing ZTA can significantly enhance an organization’s security posture by ensuring rigorous verification processes before granting access to network resources.
<ol>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="20" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:1080,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">General Adoption: The application of Zero Trust principles has significantly increased over recent years, with 61% of organizations worldwide implementing Zero Trust initiatives in 2023, up from 24% in 2021.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="20" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:1080,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Federal Agencies: In 2023, federal agencies are reported to be making substantial progress in incorporating Zero Trust Architecture to secure their diverse IT, OT, and IoT infrastructures.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="20" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:1080,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Palo Alto Networks: Drew Epperson from Palo Alto Networks highlighted how the transition to Zero Trust, supplemented by automation, AI, and machine learning tools, can enhance user experience in public sector organizations.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="20" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:1080,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Juniper Networks: The company expanded its Connected Security portfolio to extend Zero Trust policies across distributed data center environments, showcasing real-world application of Zero Trust principles in securing distributed networks.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="20" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:1080,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Microsoft: Microsoft provides technical guidelines for deploying and implementing Zero Trust principles across its cloud services, including Microsoft 365 and Microsoft Azure, indicating a real-world application of Zero Trust in cloud security.</li>
</ol>
These instances depict the ongoing commitment towards implementing Zero Trust Architecture to bolster cybersecurity, even though specific real-world examples from other organizations might not be prominently documented.

Top Cybersecurity Trends of 2023: Part 2

In an ever-evolving threat environment, staying up to date with the latest cybersecurity trends is not a choice but a necessity. The year 2023 has shown us some interesting [..]

In an ever-evolving threat environment, staying up to date with the latest cybersecurity trends is not a choice but a necessity. This is one of the reasons I’ve enjoyed working in Cyber Threat Intelligence my entire career.  It’s something new every day, the team gets to work with all aspects of the internal security team and we get to partner with like-minded individuals in the industry and research community.  I may be biased, but I’ve said many times that CTI is the best job in Cyber Security!  The year 2023 has shown us some interesting developments in the cybersecurity domain, driven by technological advancements, corporations returning to the office post-pandemic, and a global uptick in cyber threats. This post delves into the significant cybersecurity trends of 2023 and what it entails for individuals and businesses alike.
<h3>Hybrid Working Environments Are Here to Stay</h3>
The shift to hybrid working models has persisted post-pandemic, marking a significant change in how organizations operate. While this model offers flexibility, it also poses unique cybersecurity challenges. Ensuring secure access to organizational resources, safeguarding sensitive data, and fostering a culture of cybersecurity awareness among remote employees are some of the focal points for businesses adapting to a hybrid work environment.  The blend of in-office and remote work has opened new avenues for cyber threats. 
<ol>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="1" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Expansion of Attack Surface:  Industry experts have warned that remote and hybrid work models may expose new vulnerabilities and increase the surfaces prone to cyber attacks in 2023. This shift in work models is likely to create opportunities for cyber adversaries to exploit these new vulnerabilities .  We saw this in action in early 2020, where attackers took advantage of firms rapidly standing up remote access infrastructure, often with lack of proper security planning.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="1" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Increased Cyber Threats: Data from Microsoft reveals that as organizations move towards a hybrid workplace, the attack surface for cyber threats has expanded. Threat actors have been quick to exploit any vulnerabilities arising from this transition, with 81% of enterprise organizations moving towards a hybrid workplace model.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="1" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Cyber Attacks Targeting Remote Environments: The global shift to remote working has also seen a rise in the number of cyber-attacks aimed at remote environments. This necessitates companies to take measures to protect themselves, their employees, and their customers from data leakages and other cyber threats.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="1" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Security Risks in Hybrid Work Models:  Ernst &amp; Young (EY) highlighted that the hybrid model presents both opportunities and challenges in terms of managing security controls. External hackers are actively working to exploit vulnerabilities and breach company defenses for financial gain, particularly as organizations adjust to new hybrid work dynamics.</li>
</ol>
Like any major technology change, the transition to hybrid work demands a re-evaluation of existing security protocols to ensure the safeguarding of organizational assets and data in a more complex working environment.
<h3>Privacy Regulations and Compliance That Shifted the Landscape</h3>
With data being the cornerstone of the digital economy, privacy regulations have become more stringent in 2023. Organizations are now obliged to adhere to a myriad of compliance standards, emphasizing the importance of a well-rounded cybersecurity strategy that encompasses legal and regulatory adherence.

The realm of privacy regulations and compliance continues to evolve with new laws and amendments coming into effect, addressing the growing concerns related to data privacy and security. Here are some real-world examples and insights regarding privacy regulations and compliance in 2023:
<ol>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="5" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">New State Privacy Laws: As of July 1, 2023, four states have enforced new privacy laws. Among these, the California Consumer Privacy Act (CCPA) has been amended by the California Privacy Rights Act of 2020 (CPRA), bringing new compliance requirements for businesses operating in California.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="5" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Data Care Act of 2023: The Data Care Act of 2023, sponsored by Sen. Brian Schatz, D-Hawaii, imposes various duties on online service providers including a duty of care, duty of loyalty, and duty of confidentiality. This act essentially requires online service providers to secure individual identifying data reasonably.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="5" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Comprehensive Consumer Privacy Laws: In 2023, five states including California, Virginia, Colorado, Utah, and Connecticut have enacted new comprehensive consumer privacy laws. These laws bring in fresh compliance requirements for businesses, reflecting the growing emphasis on data privacy at the state level.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="5" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">The Delete Act in California: On October 10, 2023, Governor Newsom signed Senate Bill 362, known as the Delete Act. This act enables California consumers with more control over their data, signifying a step towards stronger privacy regulations.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="5" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">FTC Amendments to the Safeguards Rule: In 2023, the Federal Trade Commission (FTC) made amendments to the Safeguards Rule. These amendments require information security programs to have administrative, technical, and physical safeguards, and also consider potential rulemaking to mandate the reporting of cyber events where customer information has been compromised.</li>
</ol>
These examples reflect the ongoing efforts by various states and federal agencies to bolster data privacy regulations and ensure compliance, catering to the evolving dynamics of data security and privacy concerns.
<h3>Cyber Insurance: Balancing the Risk Management Equation</h3>
The rising incidence of cyber-attacks has propelled the importance of cyber insurance to the forefront. Organizations are considering cyber insurance as a crucial part of their risk management strategy, providing a financial cushion in the event of a cyber incident. In 2023, cyber insurance continues to evolve in response to the escalating frequency and severity of cyber attacks. Various real-world examples and insights highlight the significant role of cyber insurance in mitigating financial risks associated with cyber threats:
<ol>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="10" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Increased Adoption of Cyber Insurance: Insurance provider Hiscox surveyed 5,181 companies across eight countries and found that 64% had cyber insurance, signifying the growing recognition of cyber risks and the value of insurance as a risk management tool.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="10" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Surge in Cyber Insurance Prices: The Marsh &amp; McLennan Cos. Global Insurance Market Index revealed that U.S. cyber insurance prices skyrocketed by 79% in the second quarter of 2022, following a more than doubling in prices in the two preceding quarters. This sharp rise reflects the heightened risk perception and the escalating costs associated with cyber incidents.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="10" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Escalation in Cyber Insurance Premiums: Advancements in technologies like AI and IoT, coupled with rising cybersecurity threats, have driven up the demand and consequently the premiums for cyber insurance. It's anticipated that the number of companies unable to afford cyber insurance or be denied coverage will double in 2023.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="10" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Rising Ransom Payments: Despite a decrease in cyber insurance costs, the average ransom payments in early 2023 nearly doubled compared to the previous year. The survey reported that 40% of companies disclosed payments of $1 million, a significant jump from 11% in 2022. This trend indicates that cybercriminals are focusing more on an organization’s ability to pay rather than the security measures in place.</li>
 	<li data-leveltext="%1)" data-font="Arial" data-listid="10" data-list-defn-props="{&quot;335551671&quot;:1,&quot;335552541&quot;:0,&quot;335559683&quot;:0,&quot;335559684&quot;:-1,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769242&quot;:[65533,0],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;%1)&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Vendor Cyber Risk: Vendor cyber risk has emerged as a leading point of failure in cybersecurity, overtaking phishing attacks. Data from Resilience shows that third-party vendor incidents account for 28.9% of its clients’ claims, underlining the interconnected risk landscape and the importance of cyber insurance in providing a financial safety net.</li>
</ol>
These examples depict a dynamic and challenging cyber risk environment, where cyber insurance plays a pivotal role in helping organizations manage and mitigate the financial implications of cyber threats.

Top Cybersecurity Trends of 2023: Part 1 

In an ever-evolving threat environment, staying up to date with the latest cybersecurity trends is not a choice but a necessity. This is one of the reasons I’ve enjoyed work[..]

LastPass would like to alert our customers to a current phishing campaign that began today, November 8th.  The phishing emails are coming from the email address “info@digitaalprint[.]be” with the subject line “Required information about your account.” The below image displays the body of the email and the “Confirm my information” button will take victims to a phishing site hosted at "authentication-lastpass[.]su." Of note, this domain and the body and the content of the email itself are similar to previous phishing campaigns in September of this year. Please remember that no one at LastPass will ever ask for your master password. Rest assured, we are working to have this domain taken down as soon as possible. Please take the appropriate precautions and as always, if you have any question if an email is legitimate, please submit it to <a href="mailto:abuse@lastpass.com" target="_blank" rel="noopener">abuse@lastpass.com</a>.

Actual phishing site: “authentication-lastpass[.]su.”
Header information:
From: LastPass info@digitaalprint[.]be
Source IP: 204.90.71[.]225
Reply-to: null@digitaalprint[.]be
Subject: Required information about your account

<img class="wp-image-162683 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2023/11/Screenshot-2023-11-08-at-5.45.08-PM.png" alt="" width="546" height="47" />

<img class="alignnone size-full wp-image-162690" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2023/11/Screenshot-2023-11-08-at-5.45.18-PM.png" alt="" width="1280" height="736" />

New Phishing Campaign Leveraging LastPass Branding

LastPass would like to alert our customers to a current phishing campaign that began today, November 8th.  The phishing emails are coming from the email address “info@digitaalprint[.]be” wi[..]

The millions of sites and applications in today’s digital world are open doors for bad actors, ready to pounce on the first mistake, the first misstep. The easiest target? A company/person that uses outdated software and technology. We’ve spoken previously in <a href="https://blog.lastpass.com/2023/08/cybersecurity-as-a-quilt-why-patches-are-key-to-a-strong-defense/" target="_blank" rel="noopener">this blog</a> about the importance of vulnerability management and maintaining a current and accurate asset inventory. In this post in recognition of Cybersecurity Awareness Month, we’ll take a step back and examine auditing and modernizing your tech stack.

No matter how tech savvy your end users are (or aren't), auditing and modernizing your tech stack ensures all software and devices within your network are updated and that you have the proper tools in place to protect your business, as allowing your employees to use outdated resources leads to demonstrably increased cyber risk. As software and devices age, so does the effectiveness of its security. A good analogy in the physical world would be continuing to rely on hook and eye latches when we’ve advanced to magnetic locks and biometric access scanning. Your customers and your business are the crown jewels; protecting them with the most up-to-date technology only makes sense.

To simplify how we’re looking at this, we’ll break it down into three main goals: 1) mitigating cybersecurity risk, 2) eliminating technology debt, and 3) unifying and cataloging your technology infrastructure. Let’s dig in on each of these.
<h3>Mitigating cybersecurity risk</h3>
The most important motivation for updating your tech stack is mitigating cybersecurity risk.  This includes protecting yourself against malicious actors by leveraging up-to-date software versions and current tools, enhancing your resiliency with an updated cloud-based or hybrid infrastructure, and conducting a gap analysis of your current controls against the cyber threat environment in order to fill identified gaps. Being able to quickly understand the vulnerabilities impacting you and the tactics, techniques, and procedures that may be effective against your current defenses can allow you to act quickly to protect your customers, your data, and your company when a new threat arises.
<h3>Eliminating technical debt</h3>
Technical debt is inevitable.  Hardware and software age, quick fixes are sometimes needed, and code evolves. If not regularly addressed, technical debt may create inefficiencies and introduce risk. A <a href="https://www.outsystems.com/1/growing-threat-technical-debt/" target="_blank" rel="noopener">2021 study from Outsystems</a> found that businesses dedicate 28% of their IT budget to addressing technical debt. The number grew to 40% for large enterprises.  A measured approach to modernizing your tech stack offers companies the opportunity to “push the reset button” - to some degree - on this tech debt. While there is an inherent cost in updating code or replacing and learning new tools or systems, there are long-term enhancements to efficiency and security. A <a href="https://stripe.com/files/reports/the-developer-coefficient.pdf" target="_blank" rel="noopener">2018 study from Stripe</a> found that engineers dedicate an average of 33% of their time addressing tech debt.  Updating your tech stack can help free up that time and allow your team to focus on process improvements and security enhancements.
<h3>Unifying and cataloging your technology infrastructure</h3>
As mentioned above, we’ve written previously about the important of technology asset management. Shadow IT presents a number of threats - you can’t protect what you don’t know you have, and you can’t update technology you don’t even know is in your infrastructure. Auditing your tech stack as part of the effort to modernize it affords the opportunity to create and/or update a “single source of truth” for your technology assets. This is valuable for incident response and critical patching for a new zero-day under active exploitation. Having a documented and trusted repository that creates a common operating picture for your business may assist you to act quickly, decisively, and accurately in a crisis situation.  Further, updating your tech stack affords the opportunity to reexamine your software and tools to ensure they work together as closely as possible to improve security and enhance efficiency.

<a href="https://services.google.com/fh/files/blogs/gcat_threathorizons_full_jul2023.pdf" target="_blank" rel="noopener">Google Cloud's August 2023 Threat Horizons report</a> found that over half of the incidents its response teams handled involved compromised credentials as a factor, and it recommended stronger identity management guardrails. Auditing and updating your tech stack provides companies the opportunity to implement the most up-to-date access management technology and redefine and enforce their access requirements.  It's critical to combat the ongoing credential crisis by providing users modern security tools, such as password managers, that enable them to safely create, manage, store and share sensitive data and take advantage of the latest updates, like going passwordless to reduce employee friction when it comes to password hygiene.

Modernizing Your Tech Stack

The millions of sites and applications in today’s digital world are open doors for bad actors, ready to pounce on the first mistake, the first misstep. The easiest target? A company/person that uses o[..]

LastPass is committed to monitoring the cyber threat environment to keep our customers as secure as possible. To highlight this commitment, we want to call attention to our recent efforts to disrupt a phishing campaign targeting our customers and associates that began two weeks ago. We are sharing this with you not because it is a new or unique threat, but to underscore the efforts we are taking to disrupt this threat and ones like it.
On the morning of September 13th, our customers began reporting a pervasive and convincing phishing campaign. The campaign had global reach and targeted a variety of sectors, including 87 of our own employees. The first reports we saw coming in from our customers arrived at approximately 9:34 am ET.  The email originated from a sender address called “marketing@sbito.co[.]th” and was associated with a domain that had not previously been linked to malicious activity targeting LastPass prior to that morning.
The email also included a link to a phishing page hosted on subdomains of “customer-lastpass[.]su.” The campaign was widespread yet targeted enough to draw attention from the Information Security community, including a blog post calling out the emails from Malwarebytes published the following day. In an effort to protect our customers, this campaign became an immediate priority for LastPass and our domain monitoring and takedown vendor, <a href="https://www.phishlabs.com/" target="_blank" rel="noopener">Fortra’s PhishLabs</a>, as soon as it was detected.
Fig. 1: Example of Phishing Email from September 13, 2023
<img fetchpriority="high" decoding="async" class="alignnone size-full wp-image-161939" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2023/09/Screenshot-2023-09-25-at-4.47.47-PM.png" alt="" width="1404" height="1082" />
Fortunately, LastPass’ Threat Intelligence, Mitigation, and Escalations team frequently works with PhishLabs to protect our customers from phishing campaigns exactly like this one <a href="https://www.phishlabs.com/domain-monitoring/" target="_blank" rel="noopener">by actively monitoring our domains</a>. In fact, by the time the first reports started coming in from our customers, a takedown request to each respective service provider for the two suspicious domains was already under way as the sites had been detected at approximately 8:55 am ET that morning. Furthermore, the “lastpass[.]su” site had been overtly marked for monitoring since September 3rd, the day after it was registered. As soon as the site went active, LastPass, in conjunction with PhishLabs, was able <a href="https://www.phishlabs.com/drp-digital-risk-protection/" target="_blank" rel="noopener">to begin the mitigation process immediately</a>. Additionally, we were able to pivot off the PDNS data to proactively identify other domains that may be leveraged for future phishing campaigns and flag them for monitoring as well.
Unfortunately, the threat actors materialized again on September 19th when a similar subdomain for the credential phishing site was registered, and several new domains for the phishing emails were leveraged. Again, PhishLabs was able to identify these sites as soon as they went active, <a href="https://www.phishlabs.com/credential-phishing-sites/" target="_blank" rel="noopener">immediate takedown of the phishing subdomains</a> (all falling under the domain “last-pass[.]su”) within just 16 hours from the start of the campaign’s second wave!
While the speed of takedown is often outside the control of the targeted company and can vary based on the malicious domain’s host, LastPass is proud that we were able to work with PhishLabs to get quick and seamless confirmation of site disruptions within 48 hours or less, thereby minimizing and containing the potential threat posed to our customers. Furthermore, <a href="https://www.phishlabs.com/counterfeit-protection/" target="_blank" rel="noopener">PhishLabs shared these sites with major browsers</a> via Fraudcast, helping to fortify our customers’ security further with another layer of protection. Rest assured, LastPass is committed to continuing to <a href="https://www.phishlabs.com/credential-phishing-sites/" target="_blank" rel="noopener">proactively protect our users in partnership with this trusted vendor</a>.
For more information on steps you can take to help protect yourself against phishing emails, please see this <a href="https://blog.lastpass.com/2022/06/if-something-looks-phish-y-it-probably-is-stay-safe-with-these-tips/" target="_blank" rel="noopener">blog post</a> from our Chief Secure Technology Officer, Christofer Hoff.  You can also find more technical details on our legitimate email domains <a href="https://support.lastpass.com/s/document-item?language=en_US&amp;bundleId=lastpass&amp;topicId=LastPass/allowlisting-firewall-configuration.html&amp;_LANG=enus" target="_blank" rel="noopener">here</a>.
Lastly, for our customers who want to report a suspicious email, please forward any questionable emails to <a href="mailto:abuse@lastpass.com" target="_blank" rel="noopener">abuse@lastpass.com</a> and our team will take the appropriate action from there.

LastPass Threat Intel Team and Fortra's PhishLabs Work Together to Protect Customers From Phishing Scams

LastPass is committed to monitoring the cyber threat environment to keep our customers as secure as possible. To highlight this commitment, we want to call attention to our recent efforts to disrup[..]

Bad news: There are a lot of people out there who want your passwords. And there are a multitude of reasons why they want these passwords… but here’s the tl;dr: None of them are good.  Let's take a look at the types of threat actors that want your passwords, why they may want them, how they can get them, and how you can minimize the impact to you should a password fall into the wrong hands.

We’ll break this down into three main groups: Nation-states, cybercriminals, and malicious insiders.  You’ll find motivations vary widely between these groups but ultimately the end result is the same - getting access to sensitive data and/or systems.
<h4>Nation-States</h4>
This is the fancy cyber (and political science/international affairs) way of saying governments.  They want passwords so they can get access to systems, information, or both. And they want that access so they can steal that information, set up a lasting presence in those systems, some combination of those two, or in relatively rare cases, to destroy the data and/or the system permanently. This last one can have devastating consequences, particularly if that data or system is related to critical infrastructure (think shutting down the power grid).
<h4>Cybercriminals</h4>
It’s all in the name here, folks. The “why” is easy on this one… these are financially motivated criminals who want money.  Passwords provide two avenues for making money for them: Either selling the passwords themselves (the average login credentials fetch about 10 dollars on the dark web) or for getting access to accounts or systems to then generate money through one of a variety of means, including ransomware, data exfiltration and extortion, or if it’s a financial account, draining the money from the account directly.
<h4>Malicious Insiders</h4>
While it would be an accurate application of the term, this doesn’t refer to co-workers who microwave broccoli or fish in the lunchroom. These are colleagues in your company who may be seeking to do harm to a firm by abusing access to its networks.  They may want your password solely to conduct bad actions under your account - making it look like you are the culprit and complicating forensic efforts. Or they may want your password because you have access to different parts of a company network… sensitive financial information, for instance, and access to industrial control systems that could cause physical damage.
<h3>How can they get them?</h3>
There are some commonalities across these bad actors in how they may try and get your password - via  commodity malware they purchase online or buying your credentials directly from a dark web vendor selling them from a previous breach. There are also some distinctions between these bad actors and the methods they may use to get your password. Let’s take a look at the differences.

Nation-states have the most training and resources (i.e., people and money), so they have the greatest number of options. They will often develop their own specific malware, frequently leveraging new or unreleased software vulnerabilities, to gain access to devices or networks and exfiltrate passwords.  They may also target someone directly with a well-crafted spearphishing email to get them to offer up their password unknowingly. Or they may target a service provider upstream, like a cloud service provider, to gain access to numerous accounts and credentials at the same time.

Cybercriminals, as you would expect, take a more entrepreneurial approach to the problem. Some groups will focus largely on obtaining passwords via infostealers or phishing emails and then sell these credentials on the dark web (for more on infostealers, see our blog post <a href="https://blog.lastpass.com/2023/07/infostealers-the-widespread-threat-from-information-stealing-malware/" target="_blank" rel="noopener">here</a>). Others will leverage malware created by other groups that create phishing kits or infostealers to be sold as a service, the same way most people would buy office software. These malware-as-a-service (MaaS) offerings are designed to make it easy for someone with minimal technical knowledge to configure and launch phishing or malware campaigns.  They feature clean user interfaces that make it easy to configure the user’s attacks.

Malicious insiders have a leg up on the other types of threat actors because they generally already have access to your offices and networks. They can check your desk for written passwords or peruse shared folders on your network to see if anyone has stored any passwords on a SharePoint site or other common access area. They may also check code repositories for hard-coded passwords, all with the goal of gaining illicit access to do some sort of damage to their employer and/or co-workers.
<h3>How can you minimize damage?</h3>
There won’t be any surprises here… use a password manager. You only have to remember one master password, you can easily create and store complex and unique passwords for each of your accounts, and if a password gets exposed in a breach, it’s easy to generate a new one. LastPass also offers free credential monitoring to all of our customers. If you’ve elected to use dark web monitoring, our service continuously monitors a database of breached credentials and alerts you so you can take proactive action to protect yourself. Having unique passwords for your accounts also minimizes the damage in the event your credentials are exposed and limits what a bad actor can do if they get their hands on it.  These days, it’s just a matter of when, not if, some of your credentials are exposed, so it’s best to be prepared for when it happens, and we can help you do that.

Who Wants Your Passwords And Why?

Bad news: There are a lot of people out there who want your passwords. And there are a multitude of reasons why they want these passwords… but here’s the tl;dr: None of them are good.  Let's take a lo[..]

Like driving a vehicle, accessing the internet in some capacity or another is a necessity for most people. And both activities bring inherent risks. In fact, according to the United States Cybersecurity and Infrastructure Security Agency, <a href="https://www.cisa.gov/be-cyber-smart/facts" target="_blank" rel="noopener">one in three homes</a> with computers are infected with malicious software. And 65% of Americans who go online receive at least one online scam offer. But just as you can learn to drive defensively, learning how to identify and avoid cyber attacks can help you protect yourself and your information from malicious cyber actors. 

While many cyber threats can be automatically mitigated via antivirus services, firewalls, or other protective measures, the most dangerous cyber threats often take advantage of the human element to get around these automated defenses.  Some involve direct interaction with the victim (these generally fall under the category of social engineering) and some lay a trap and hope an unsuspecting user takes the bait (for example, bogus apps available in unregulated app stores). We will cover both types of threats and how you can avoid them. We'll also take a look at password reuse, the threat it poses, and how to avoid this mistake. 
<h3>Social Engineering</h3>
Social engineering is a term used to describe a wide variety of malicious activities with a similar, basic approach – engaging a victim directly (either via email, SMS, phone call, or other method) to get them to provide sensitive information or interact with a website designed to infect their computer with malware. While all of these involve leveraging the human element of an attack, the methods and warning signs vary. So, let’s take a look at the main types of social engineering. 

Phishing

This is the most common form of cyber attack with approximately <a href="https://www.splunk.com/en_us/blog/learn/phishing-scams-attacks.html#:~:text=3.4%20billion%20phishing%20emails%20are,compromised%20due%20to%20phishing%20attacks" target="_blank" rel="noopener">3.4 billion phishing emails</a> sent every day. These are emails designed to look like they are coming from a legitimate sender and will leverage different topics or approaches, known as “lures,” to try and trick the recipient into engaging with the email.  These lures may leverage recent events such as holidays or natural disasters to draw attention, may claim to be from a business stating your account has been compromised, or include a fake “invoice” for a recent expensive purchase with limited time to contest the charge if inaccurate. These emails are meant to place psychological pressure on the recipient to respond, either out of interest or to ensure that they aren’t the victim of some other fraud. 

How you can protect yourself from phishing attacks

Historically, one of the easiest signs to spot a phishing email was poor grammar and spelling. However, with the spread of ChatGPT and other large language models, threat actors can now create very convincing and grammatically accurate emails that are much more difficult to detect.  Instead, the best approach is to approach any emails that don’t come from trusted senders with caution – and follow these best practices: 
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Make sure to check the full sender information in any email requesting that you click on a link or call into a customer support center.  For example, you may receive an email from a familiar company, but if you check the sender’s actual email address, it may be coming from a different domain, as in the example below: </li>
</ul>
<img class="wp-image-161383 aligncenter" src="https://cdn.lputil.com/wp-content/uploads/sites/20/2023/08/Screen-Shot-2023-08-10-at-4.00.05-PM.png" alt="" width="365" height="38" />
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Don’t click on any links in emails coming from unrecognized senders. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">When in doubt, contact the company that purportedly sent the email directly, and use contact information you separately obtain from the company’s main website to confirm the email is legitimate. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Let your password manager help. If your password manager is set to autofill for known accounts but does not autofill your information for a website you visit, this may indicate a phishing site. </li>
</ul>
Vishing

Vishing is a portmanteau of “voice phishing” and is the verbal equivalent of phishing.  These typically involve a threat actor calling a victim and claiming to be from a reputable company, law enforcement, or a tax agency in an attempt to get the individual to provide sensitive information, including credit card or social security numbers, passwords, or financial data. 

How you can potentially protect yourself from vishing attacks
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Allow callers from phone numbers you don’t recognize to leave you a voicemail. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">Contact the company or agency the caller is purporting to be from directly to confirm the issue is legitimate.  Call a number posted on the company or agency’s main website rather than calling any number provided by the potential visher. </li>
</ul>
Smishing

Smishing is similar to vishing and phishing, but threat actors use SMS messages (texts) to target the victims. Some texts may include links to malicious sites while others may claim to be from a law enforcement agency, a mail or delivery service, or a legitimate company. These text messages may warn you that your account has been hacked and ask that you log in (to a false phishing site) in order to collect your credentials.  

Another widespread tactic involves the threat actor sending a text to an individual claiming to be a senior leader in the recipient’s workplace asking them to purchase a gift card on their behalf.  These texts frequently include the claim that the senior leader is engaged in a meeting, can’t do it themselves, and requests immediate assistance. This last tactic is designed to make the recipient feel a sense of urgency in the hopes they will act without fully processing the potential threat. 

How to avoid smishing attacks
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Don’t respond to or click on any links in unsolicited text messages. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">Verify the sender directly before taking any action. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">Delete and, when possible, report any smishing messages to your cellular service provider and/or the company the text claims to be from. </li>
</ul>
<h3>Malicious Applications</h3>
Some threat actors develop applications (apps) that resemble known and trusted brands in an attempt to steal information and/or deliver malware to a user’s mobile device or computer. These apps are designed to look identical to the official app and may be difficult to identify. However, there are steps you can take to avoid falling victim to one of these clones: 
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">Only use official app stores like the Apple App Store or Google Play. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1">Verify the developer of the app. For instance, LastPass lists LogMeIn, Inc. as its developer on the Apple App Store and GoTo Technologies on the Google Play store.  Any other developer or publisher would be an indicator that the app is likely malicious. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1">Check the app description for grammatical or spelling errors. </li>
</ul>
<h3>Password Reuse</h3>
According to LastPass’ <a href="https://www.lastpass.com/resources/ebook/psychology-of-passwords-2022" target="_blank" rel="noopener">2022 Psychology of Passwords report</a>, nearly 62% of people reuse some variation of a single password, and even among individuals who had received training on the dangers of password reuse, only 31% of those individuals stopped reusing passwords and 25% started using a password manager. This is particularly dangerous when these passwords are exposed as threat actors will use these stolen credentials in their attacks; according to the 2023 Verizon Data Breach Investigations Report, <a href="https://www.verizon.com/business/resources/reports/dbir/" target="_blank" rel="noopener">86% of basic web application attacks</a> that resulted in breaches involved the use of stolen credentials.

The best thing you can do is to create unique and complex passwords for every account, and you can leverage a password manager to do this. As the move to passwordless authentication gets closer, it’s also best to choose a password manager that can help seamlessly adopt this new technology. 

While cyber threats are everywhere, being aware of the most common types and taking these simple steps to avoid them can help protect yourself, your family, and your business against data breaches or other cyber attacks.

Recognizing and Avoiding Common Cyber Attacks 

Like driving a vehicle, accessing the internet in some capacity or another is a necessity for most people. And both activities bring inherent risks. In fact, according to th[..]

LastPass Labs is the content hub for the Threat Intelligence, Mitigation and Escalations (TIME) team at LastPass. Our focus is in-depth analysis of the latest security developments, a keen eye toward forward-looking tech, and unique threat perspectives. 

Cybersecurity is a necessity for all businesses, from the largest multinational corporations to single-person start-ups. While some companies are fortunate enough to have large budgets dedicated solely to cybersecurity, others must prioritize efforts with limited resources to maximize returns.  In addition to establishing strong controls around emails, including scanning for and blocking malicious messages, along with employee awareness and training to lower the risk from social engineering attacks, vulnerability management is a critical pillar of a basic cybersecurity program and provides an immediate return on investment. Successful exploitations of vulnerabilities are one of the top causes of cyber incidents – in its <a href="https://www.mandiant.com/resources/blog/m-trends-2023" target="_blank" rel="noopener">2023 M-Trends report</a>, Mandiant noted 36% of its investigations into intrusions included the exploitation of a vulnerability.

Understanding your technology infrastructure and what devices you have as part of your network via asset management is recognized as a key pillar in several cybersecurity frameworks, including the National Institute of Standards and Technology (NIST) cybersecurity framework. Knowing your technology inventory enables your companies – regardless of size – to quickly understand if they are impacted by new vulnerabilities and take the right steps to patch them. You can’t protect what you don’t know you have. The value of identifying the presence of vulnerabilities within your environment and patching them as quickly as possible can’t be overstated.  According to the Rapid7 <a href="https://www.rapid7.com/blog/post/2023/02/28/a-shifting-attack-landscape-rapid7s-2022-vulnerability-intelligence-report/" target="_blank" rel="noopener">2022 Vulnerability Intelligence Report</a>, more than half of the vulnerabilities studied were exploited within seven days of their public disclosure, representing a 12% increase from 2021 and an 87% increase from 2020.

While most people associate vulnerabilities with major software providers, the reliance on open-source software further complicates the vulnerability threat environment. According to an <a href="https://openuk.uk/wp-content/uploads/2021/10/openuk-state-of-open_final-version.pdf" target="_blank" rel="noopener">OpenUK study</a>, 90% of companies use open-source software, increasing the potential supply chain security risks beyond the standard concerns around operating systems and/or proprietary software. Further, <a href="https://www.gartner.com/en/articles/7-top-trends-in-cybersecurity-for-2022" target="_blank" rel="noopener">Gartner</a> predicts 45% of organizations worldwide will experience an attack on their software supply chain by 2025. The widespread nature of open-source software usage creates dependencies that can be difficult to identify if they are not closely tracked. For example, even a year after its initial disclosure and despite being among the most commonly exploited vulnerabilities of 2022, the Apache Log4j vulnerability (CVE-2021-44228) was still found in 5% of the codebases audited by Snyopsys according to their <a href="https://www.synopsys.com/software-integrity/resources/analyst-reports/open-source-security-risk-analysis.html?intcmp=sig-blog-ossra22" target="_blank" rel="noopener">2023 Open-Source Security and Risk Analysis Report</a>.

Finally, the increase in working from home and bring your own device (BYOD) programs has extended the potential attack surface for most companies well beyond the traditional boundaries of a company infrastructure, forcing businesses to consider potential vulnerabilities outside their direct control.  Strong patching policies and employee education and communications are key to helping harden the wider boundaries of a company’s environment. 
<h3>What steps can be taken?</h3>
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Establish vulnerability and patch management policies and procedures that align with both business priorities and industry best practices.  Having clear policies that dictate how to respond to new vulnerabilities makes remediation faster and easier. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">When possible, invest in tools that allow for automated detection of assets and the vulnerabilities and/or issues that may impact them. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1">Develop a robust asset inventory of not only the proprietary software within your environment, but also understand the open-source dependencies that may exist within your applications. Leveraging software bills of material (SBOMs) can help identify what open-source components may be critical to your operations and allow you to act quickly should a new vulnerability arise. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="4" data-aria-level="1">Whenever possible, allowing auto-updates to software can help address vulnerabilities as quickly as possible. If testing is required to ensure the update will not disrupt operations, conduct the testing as quickly as possible. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="4" data-aria-level="1">The number of vulnerabilities released annually can be daunting, with over 25,000 vulnerabilities <a href="https://www.cve.org/About/Metrics" target="_blank" rel="noopener">published in 2022</a>. Prioritizing patching those vulnerabilities by both their severity and the presence of active exploitation by threat actors.  To assist in this, the United States Cybersecurity and Infrastructure Security Agency (CISA) maintains a catalog of known exploited vulnerabilities and updates this list regularly (the catalog can be found here). The list is free and available to the public and can serve as a key resource in helping to prioritize patching based on real-world threats.  Also, the Forum of Incident Response and Security Teams (FIRST) has produced an <a href="https://www.first.org/epss/" target="_blank" rel="noopener">Exploit Prediction Scoring System</a> (EPSS) that can also help prioritize remediation based on the likelihood of exploitation.</li>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="4" data-aria-level="1">The development of a custom prioritization methodology can also greatly assist in responding quickly and appropriately to new vulnerabilities.  This model would be dependent upon a mix of external elements, such as a vulnerability’s CVSS score and evidence of active exploitation, as well as internal elements such as whether or not the impacted assets are critical and/or externally facing.  </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="1" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="4" data-aria-level="1">Establish clear policies for updating BYOD devices and communicate those expectations to employees. Highlight new vulnerabilities that may affect these devices (including cell phones or home computers) to employees so that they can patch them promptly. </li>
</ul>
While maintaining a vulnerability management program can seem daunting, taking these steps can help ensure a threat-based approach to prioritizing your efforts, even with limited resources.  This risk-based approach can allow companies to maximize the returns on their investments along the Pareto principle, in which 80% of the benefits of a vulnerability management program can be achieved with the first 20% of the effort. 

The LastPass Threat Intelligence, Mitigation, and Escalation (TIME) team is focused on protecting our community by monitoring for, analyzing, and mitigating threats targeting our customers, our company, and our industry. The team has nearly 50 total years of intelligence and cyber experience and firmly believe in information sharing and relationship building as the key to a successful intelligence program. Our goal within LastPass is to provide timely and actionable intelligence to stakeholders that allow our security teams to protect our customers, their data, and the company. In addition to conducting analysis and informing our security teams on developments in the larger cyber threat environment, we are also working to automate our intelligence inputs into our partners’ processes and minimize the timeframe from threat awareness to mitigation.

Cybersecurity as a Quilt: Why Patches Are Key to a Strong Defense

LastPass Labs is the content hub for the Threat Intelligence, Mitigation and Escalations (TIME) team at LastPass. Our focus is in-depth analysis of the latest security dev[..]

LastPass Labs is the content hub for the Threat Intelligence, Mitigation and Escalations (TIME) team at LastPass. Our focus is in-depth analysis of the latest security developments, a keen eye toward forward-looking tech, and unique threat perspectives. 
While ransomware may continue to dominate the headlines, an insidious form of malware known as infostealers (short for information-stealing malware) is actually far more common, impacting everything from major corporations to individual home computers. Infostealers target sensitive information on infected systems, including passwords, crypto wallets, session cookies, financial details, and other personal data for quick exfiltration back to the threat actor.  

Many infostealers are offered for sale as a “malware-as-a-service (MaaS),” in which criminals can purchase a subscription (often for several hundred dollars a month) for access to the malware for their own targeting and use, while maintenance and hosting of the malware remains in the hands of the developer offering it for sale.  This helps lower the technological barrier to entry for cybercriminals, leading to the rapid expansion of infostealers as a broader cyber threat. 
<h3>How are victims infected?</h3>
Victims can be infected via several methods, including phishing emails, visiting an infected website, or through fraudulent apps. Once a computer or network has been infected, the malware will execute, seeking to rapidly identify and exfiltrate critical information (including, when possible, LastPass master passwords) from browsers and other important folders. Threat actors will then either use this data to gain access to sensitive accounts themselves, or repackage the information for sale on markets, forums, or other criminal sites. 

Prices currently average approximately <a href="https://www.accenture.com/us-en/blogs/security/information-stealer-malware-on-dark-web" target="_blank" rel="noopener">$10 per log</a> and there are millions of logs available for sale at any given time, demonstrating the widespread and commonplace nature of the infostealer threat. These logs include credentials and other sensitive information from victims ranging from multinational corporations to small businesses to individual personal accounts stolen from a home computer. 
<h3>What is LastPass doing about this?</h3>
To start, as part of our efforts to increase our security capabilities, LastPass has invested substantially in our cyber threat Intelligence program.  This includes building a dedicated Threat Intelligence, Mitigation, and Escalation (TIME) team, greatly expanding our threat intelligence monitoring and alerting by leveraging open source and proprietary reporting, and proactively monitoring deep and dark web sources for malicious activity. We’re also operationalizing this intelligence by automating its integration with our detection and response and vulnerability management teams, allowing for a quicker mitigation time. Finally, we have developed a dedicated and focused process for monitoring for and alerting on exposed customer credentials for customers opting into dark web monitoring. 

As expected, master passwords are highly valued within the infostealer community given the potential to gain access to a customer’s vault and its sensitive data and passwords. While there are dozens of infostealers available, LastPass is tracking three malware strains that commonly advertise LastPass customer credentials for sale: 
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Redline: This MaaS stealer has been available since 2020 and is among the most common.</li>
 	<li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">Raccoon: Variations of this stealer have been available since 2019.</li>
 	<li data-leveltext="" data-font="Symbol" data-listid="7" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="3" data-aria-level="1">Vidar: Available since at least 2018, this stealer is also able to take screenshots. </li>
</ul>
LastPass is taking important steps to protect our customers’ credentials. We have recently expanded our dark web monitoring to include monitoring infostealer logs and other sources for potential LastPass customer credentials. While LastPass can’t help preventing the initial infection as it often occurs via phishing, visiting an infected website, or using a fraudulent application locally on an end user’s device, we can help protect our customers’ by informing them if we detect that their data has been stolen.
<h3>What steps can you take to protect your account?</h3>
We recommend that all LastPass users opt into our dark web monitoring program, which will provide an extra level of coverage. We will notify you if your credentials are found on the dark web. Additionally:
<ul>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="1" data-aria-level="1">Use multifactor authentication (MFA) whenever it is an option to protect your accounts.  Don’t accept or approve MFA requests that you didn’t explicitly generate. </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">Don’t trust apps offered via non-traditional channels (e.g., other than traditional app stores). </li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">Use an antivirus program and update it regularly or, better yet, set it for automatic updates.</li>
 	<li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{&quot;335552541&quot;:1,&quot;335559684&quot;:-2,&quot;335559685&quot;:720,&quot;335559991&quot;:360,&quot;469769226&quot;:&quot;Symbol&quot;,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;&quot;,&quot;469777815&quot;:&quot;hybridMultilevel&quot;}" aria-setsize="-1" data-aria-posinset="2" data-aria-level="1">Don’t save your master password on your device, even in browser-provided autofill options.  </li>
</ul>
LastPass will continue to improve our monitoring and reporting capabilities, and we are developing a process to proactively disrupt those malware strains targeting LastPass accounts. We are committed to keeping our customers and the larger cybersecurity community apprised of these trends, the steps we are taking to keep our customers' data safe, and the impact our efforts are making as part of our commitment to transparency. 

The LastPass Threat Intelligence, Mitigation, and Escalation (TIME) team is focused on protecting our community by monitoring for, analyzing, and mitigating threats targeting our customers, our company, and our industry. The team has nearly 50 total years of intelligence and cyber experience and firmly believe in information sharing and relationship building as the key to a successful intelligence program. Our goal within LastPass is to provide timely and actionable intelligence to stakeholders that allow our security teams to protect our customers, their data, and the company. In addition to conducting analysis and informing our security teams on developments in the larger cyber threat environment, we are also working to automate our intelligence inputs into our partners’ processes and minimize the timeframe from threat awareness to mitigation.

Infostealers: the Widespread Threat From Information-Stealing Malware

LastPass Labs is the content hub for the Threat Intelligence, Mitigation and Escalations (TIME) team at LastPass. Our focus is in-depth analysis of the lates[..]

Blog

Blog

Recent

Industry News

LastPass For Admins

LastPass Labs

Product Updates

Tips And Tricks

Security 101