Hacker attack on LastPass, the company: “No data breached”

LastPass, popular and widespread password manager app, confirmed an extensive operation to attempt to access subscriber data.

The application is used as a kind of digital safe where people can protect all their passwords with a single access key, called Master Password. And this is exactly what hackers are aiming at, through the Credential Filling technique, which uses automated software capable, in a few seconds, of try millions of combinations hoping to reach the correct mix to access the profiles.

The names and passwords used for the attempts come from other violations occurred on the Net, of which people often do not even know they have been victims. This is why experts always advise not to use the same combination for multiple sites and apps.

According to initial surveys, dozens of people have received email alerts from a unauthorized access attempt to accounts, promptly blocked. To link the activities, a series of Brazilian Internet addresses, from which the operations would start.

In the last few hours, LastPass has reassured subscribers to the service, stating that no data would be stolen: “LastPass has reviewed recent reports of blocked login attempts and we believe the activity is related to a credential stuffing attempt. At the moment, we have no indication that account access has been successful or that the service has been compromised by an unauthorized party. “And yet, reports are increasing, both on the Hacker News forum and with various tweets on Twitter. .