Theft of more than $35 million in crypto is linked to LastPass

Some researchers and cybersecurity experts have linked LastPass security flaws reported last year to the theft of more than $35 million in cryptocurrency.

This online password manager reported at the end of August 2022 about a bug that an external actor took advantage of to access the platform’s development environment, at which time he indicated that this had not affected the data saved by other users. .

Later, in December, the company detailed that the attacker did use that vulnerability to steal part of the code and technical information and access information stored in its cloud storage service.

Now, cybersecurity experts have gathered evidence showing that data recorded in some of the then-exploited LastPass password vaults may have been used in several malicious attacks to steal cryptocurrency.

Specifically, this evidence details that the cyberattackers would have stolen more than 35 million dollars in cryptocurrencies, an operation that would have affected more than 150 users. Specifically, between two and five robberies have been carried out per month since December 2022.

This has been detailed by cybersecurity experts such as Brian Krebs, who has compiled this research in a post on his blog, as well as other specialists in the cryptocurrency sector, such as the product manager of the crypto wallet company MetaMask, Taylor Monahan, who has published his findings through X (Twitter).

According to him, the main people affected by these attacks would be experienced cryptocurrency investors who are aware of the security measures necessary in this sector. This suggests that the victims were not attacked through their email account or mobile phone, the most common means in these cases.

Source: dpa

(Referential image source: Aleksi Räisä, Unsplash)

Visit our news channel on Google News and follow us to get accurate, interesting information and stay up to date with everything. You can also see our daily content on Twitter and Instagram