Lastpass breach 2021 software#
Lastpass breach 2021 code#

“Threat actors will use any security gap or weakness to initially breach the network, and then move laterally across to their intended target – in this case it was corporate data from cloud storages.”ġ0 things you need to know direct to your inbox every weekday. “People assume that if a personal home computer has nothing of value on it then it won’t be a target for cyber criminals, however, this is simply not true,” Mackay said. Martin Mackay, the CRO of security company Versa Networks, said the hack should be a lesson to organisations that “any device is at risk”.

This company also warned that the hacker may have stolen an encryption key, which could be used to unscramble some of the sensitive data. LastPass owner GoTo also had some of its customer data stolen from the breach. The data breach led to customer information being stolen, including company names, user names and email addresses, along with encrypted sensitive information such as passwords. LastPass said it also assisted the DevOps engineer in hardening the security of their personal devices and home network. The company said it has upgraded its security measures in response to the breach, including additional logging and alerting across the cloud storage environment. LastPass said it was difficult for investigators to differentiate between threat actor activity and ongoing legitimate activity, due to the hacker’s use of valid engineer credentials. This activity occurred for two months, between 12 August and 26 October last year. The hacker then used the data from this vault to access and steal data from a LastPass cloud storage environment. “The threat actor was able to capture the employee’s master password as it was entered, after the employee authenticated with MFA, and gain access to the DevOps engineer’s LastPass corporate vault,” LastPass said.

Lastpass breach 2021 software#

LastPass said the hacker achieved this goal by targeting the engineer’s home computer and exploiting a “vulnerable third-party media software package”, which allowed the threat actor to implant keylogger malware.

This engineer was one of four staff members that had access to the decryption keys needed to access the cloud storage service. In a recent incident report, LastPass said the threat actor was able to decrypt the information it had stolen in August by targeting a DevOps engineer.

Lastpass breach 2021 code#

The password management platform confirmed it suffered a data breach last December, after an “unknown threat actor” accessed its customer vault by using source code and technical information obtained from an earlier cyberattack in August. LastPass has shared more details on the recent cyberattack that saw customer data stolen from the company’s cloud storage. The hacker implanted keylogger malware to capture the employee’s master password, which gave access for months before it was detected.