LastPass hacking victims lost $4.4 million in a day

Carding 4 Carders

Professional
Messages
2,731
Reputation
13
Reaction score
1,367
Points
113
In one day, at least 25 people lost $4.4 million worth of cryptocurrencies from 80 wallets. The incident was the result of a data leak from the LastPass password manager in December 2022.

fc78083613.jpg

twitter.com

An on-chain sleuth named ZachXBT reported that together with MetaMask developer Taylor Monahan, it tracks the movement of funds from addresses compromised on October 25.

87e596101e.jpg

twitter.com

"Most, if not all, of the victims are long-time users of LastPass and/or confirm that they have stored their keys or passphrases in the service," Monahan said in a report on Chainabuse.

Earlier, LastPass confirmed that the attackers managed to gain access to the encrypted data of the password vault. The developers assured that the information remains confidential due to the zero-disclosure architecture.

In September, cybersecurity journalist Brian Krebs wrote that experts found more than $35 million worth of cryptocurrencies stolen from about 150 confirmed victims. They were all LastPass users.

"The profile of the victims is the most striking thing. They are really all sufficiently knowledgeable about security issues. They are deeply integrated into this ecosystem, [including] employees of reputable crypto organizations, venture capitalists, people who created DeFi protocols, deployed smart contracts, managed full nodes, " Monahan said at the time.

According to researchers, as a result of the LastPass data leak, an employee of the well-known analytical company Chainalysis lost "several million" in digital assets. The firm confirmed the incident, but declined to comment.
 
Top