{“lastseen”:”2025-10-27T14:57:32″,”description”:”LastPass has alerted users about a new phishing attack that claims the recipient has died. According to the message, a family member has submitted a death certificate to gain access to the recipient\u2019s password vault. A link in the phishing email, supposedly to stop the request, leads to a fake page that asks for the LastPass user\u2019s master password.\\n\\nImage courtesy of LastPass\\n\\n\\u003e \u201cLegacy Request Opened (URGENT IF YOU ARE NOT DECEASED)\\n\\u003e \\n\\u003e A death certificate was uploaded by a family member to regain access to the Lastpass account\\n\\u003e \\n\\u003e If you have not passed away and you believe this is a mistake, please reply to this email with STOP\u201d\\n\\nLastPass links this campaign to _CryptoChameleon_ (also known as _UNC5356_), a group that previously targeted cryptocurrency users and platforms with similar social engineering attacks. The same group used LastPass branding in a phishing kit in April 2024.\\n\\nThe phishing attempt exploits the legitimate inheritance process, which is an emergency access feature in LastPass that allows designated contacts request access to a vault if the account holder dies or becomes incapacitated.\\n\\nStealing someone\u2019s password manager credentials gives attackers access to every login stored inside. We recently reported on an attempt to steal 1Password credentials.\\n\\nLastpass also notes that:\\n\\n\\u003e \u201cSeveral of the phishing sites are clearly intended to target passkeys, reflecting both the increased interest on the part of cybercriminals in passkeys and the increased adoption on the part of consumers.\u201d\\n\\nPasskeys are a very secure replacement for passwords. They can\u2019t be cracked, guessed or phished, and let you log in easily without having to type a password every time. Most password managers\u2014like LastPass, 1Password, Dashlane, and Bitwarden\u2014now store and sync passkeys across devices.\\n\\nBecause passkeys often protect high-value assets like banking, crypto wallets, password managers, and company accounts\u2014they’ve become an attractive prize for attackers.\\n\\n## Advice for users\\n\\nWhile passkeys themselves cannot be phished via simple credential theft, attackers can trick users into:\\n\\n * Registering a new passkey on a malicious site or a fake login page\\n * Approving fraudulent device syncs or account transfers\\n * Disabling passkeys and reverting to weaker login methods, then stealing those fallback credentials\\n\\n\\n\\nLastPass and other security experts recommend:\\n\\n * Never enter your master password on links received via email or text.\\n * Understand how passkeys work and keep them safe.\\n * Only logging into your password manager via official apps or bookmarks.\\n * Be wary of urgent or alarming messages demanding immediate action.\\n * Remember that legitimate companies won\u2019t ask for sensitive credentials via email or phone.\\n * Use an up-to-date real-time anti-malware solution preferably with a web protection module.\\n\\n\\n\\n* * *\\n\\n**We don\u2019t just report on threats\u2014we remove them**\\n\\nCybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.”,”published”:”2025-10-27T14:15:50″,”modified”:”2025-10-27T14:15:50″,”type”:”malwarebytes”,”title”:”Phishing scam uses fake death notices to trick LastPass users”,”source”:””,”references”:””,”id”:”MALWAREBYTES:4C3BFAC64BA3AD6A293F5BB87934E56E”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/10\/phishing-scam-uses-fake-death-notices-to-trick-lastpass-users”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-27T14:57:32″,”description”:”LastPass has alerted users about a new phishing attack that claims the recipient has died. According to the message, a family member has submitted a…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-23485","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n