Fake LastPass downloads on GitHub pushed password-stealing malware
Brief
A malware campaign impersonates LastPass on GitHub to trick users into installing an information stealer that can harvest browser passwords, cryptocurrency wallets, and messaging app sessions. The campaign, detailed in a report by LastPass and Delphos Labs, used fake GitHub pages designed to appear in search results for terms such as “LastPass Authenticator download.” Investigators …
The post Fake LastPass downloads on GitHub pushed password-stealing malware appeared first on CyberInsider .