This fake LastPass Authenticator app will just shut off your antivirus and leave you open to attack
- Attackers spoofed LastPass Authenticator via SEO‑poisoned GitHub pages, delivering malicious ZIP files
- Malware Rapuncel uses DLL sideloading, kills 145 AV products, and steals passwords, wallets, and tokens
- Campaign ongoing for months; LastPass vaults unaffected, but users urged to download only from trusted sources
Be careful when downloading the LastPass Authenticator app - there are impostors out there that can disable your antivirus and wreak havoc on your computer.
LastPass recently discovered an elaborate scheme to get people infected with malware - a spoofed website, SEO poisoning, DLL sideloading, and a malware loader delivering never-before-seen payload that can kill endpoint protection and antivirus solutions.
According to the password manager, users searching for "LastPass Authenticatordownload" or similar keywords will get a GitHub page rather high on the search engine results pages. At a glance, the page looks almost identical to the authentic LastPass offering - however, it redirects users to...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
