You open your inbox and see a message about updated security policies.Nothing about it screams scam.
The email looks polished, the wording sounds official and the button promises a quick way to review the changes.That is exactly what makes it dangerous.LastPass is warning users about a newly identified phishing campaign that uses lookalike domains and a fake DocuSign page to lure people into downloading suspicious software.The good news is that LastPass says its systems were not affected.
The bad news is that scammers are counting on you to trust the logo, overlook the web address and click before taking a closer look.Here is what to watch for before one routine-looking email puts your entire password vault at risk.Free live CyberGuy class: Sick of Spam? Join us July 22Join us TODAY, Wednesday, July 22, at 1 PM ET for a free CyberGuy Live class that will help you cut down on robocalls, spam texts, junk email and other unwanted messages.
Kurt "CyberGuy" Knutsson will walk you step by step through simple ways to filter spam, clean up your inbox and recognize the messages that could put your personal information at risk.No technical experience is needed.
You’ll also receive our spam-stopping checklist, and every registrant will get a link to the class recording afterward.Reserve your free spot today at CyberGuyLive.com.FBI HELPS TAKE DOWN AI PHISHING RINGScammers are impersonating LastPass with fake policy emails that lead users to a fraudulent DocuSign page and suspicious software download.(Kurt "CyberGuy" Knutsson)LastPass phishing scam starts with a routine policy emailThe phishing email comes from [email protected].
Its known subject line reads, "Action Required: Review Updated LastPass Security Policies." Inside, the message claims LastPass has made service policy changes.It mentions enhanced SaaS monitoring.
It also claims administrators can reset master passwords and that the admin console has improved.Those details make the email sound like a...