Crypto Opinions & News $25M+ in crypto stolen from LastPass 'Secure Notes'

[Ink]

Content source

https://decrypt.co/137167/hacker-stolen-10-million-ethereum-no-one-knows-how

Update:


Original:

A Hacker Has Stolen $10 Million in Ethereum and No One Knows How - Decrypt

A hacker has been targeting OG crypto users since December, draining over $10 million in Ethereum from their wallets. Experts are baffled.

decrypt.co

 

[cartaphilus]

Update:


Original:

A Hacker Has Stolen $10 Million in Ethereum and No One Knows How - Decrypt

A hacker has been targeting OG crypto users since December, draining over $10 million in Ethereum from their wallets. Experts are baffled.

decrypt.co

Yeap hence I refuse to use Cloud based password and encryption managers. I keep everything local. I don't trust any promises of companies not having their keys to your kingdom.

 

[gonza]

Sorry, but could it be that the title is wrong?

I mean, "LastPass $25M+ stolen from 'Secure Notes'" is more than 100% likely to happen, but the article doesn't mention LastPass.

​

 

[Sandbox Breaker]

Yeap hence I refuse to use Cloud based password and encryption managers. I keep everything local. I don't trust any promises of companies not having their keys to your kingdom.

I've been advising against last pass for years now. Honestly same with WinRAR.

 

[ForgottenSeer 100397]

LastPass: #1 Password Manager

Fewer Passwords, Less Friction, Most Hacked

“The last pass you’ll ever remember... unless we have another last fail again!”

 

[Azure]

To each their own. But from what I understood, the problem with Lastpass is that it was a bad cloud-based password manager, not merely that it used the cloud.

How does a user knows when a cloud password manager is good or not, that is an important question.

 

[entropism]

When it A: Doesn't have a ROBUST history of getting breached and B: has open source, audited code.

So yeah, I'm sticking to Bitwarden.

 

[Sandbox Breaker]

When it A: Doesn't have a ROBUST history of getting breached and B: has open source, audited code.

So yeah, I'm sticking to Bitwarden.

Bitwarden is boss.

 

[Ink]

Sorry, but could it be that the title is wrong?

I mean, "LastPass $25M+ stolen from 'Secure Notes'" is more than 100% likely to happen, but the article doesn't mention LastPass.

It's correct. The original article mentions the same Twitter account, before they knew it was related to LastPass' latest data breach.

See the updated tweet.

 

[Ink]

Sorry, but could it be that the title is wrong?

I mean, "LastPass $25M+ stolen from 'Secure Notes'" is more than 100% likely to happen, but the article doesn't mention LastPass.

Extra details to link LastPass to a string of stolen cryptocurrencies.

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach – Krebs on Security

 

[Gandalf_The_Grey]

LastPass breach linked to theft of $4.4 million in crypto

Hackers have stolen $4.4 million in cryptocurrency on October 25th using private keys and passphrases stored in stolen LastPass databases, according to research by crypto fraud researchers who have been researching similar incidents.

The news comes from ZachXBT and MetaMask developer Taylor Monahan, who have been tracking these crypto thefts.

"We regularly have people reach out via DM who have had their crypto assets stolen. We also approach victims we discover on-chain," ZachXBT told BleepingComputer.

"We ask potential LastPass victims multiple questions and typically have found one commonality between them all being LastPass."

According to a tweet by ZachXBT on X, the threat actors stole $4.4 million from 25+ victims due to a LastPass breach in 2022.

"The number of victims who only had the specific group of seeds/keys that were drained stored in LastPass is simply too much to ignore."

It is becoming increasingly clear that the threat actors behind the LastPass attack have successfully cracked the passwords for vaults and are using the stolen information to fuel their own attacks.

Therefore, if you are a LastPass user who had an account during the August and December 2022 breaches, it is strongly suggested that you reset all of your passwords, including your master password.

LastPass breach linked to theft of $4.4 million in crypto

Hackers have stolen $4.4 million in cryptocurrency on October 25th using private keys and passphrases stored in stolen LastPass databases, according to research by crypto fraud researchers who have been researching similar incidents.

www.bleepingcomputer.com

 

[CyberTech]

I just wondering why not sue LP for what they did? i even don't believe this