

Something very strange and bad is happening to a lot of people's accounts.

LastPass confirmed the attack after tens of users went online today to share that they received security alert emails from the company claiming it blocked a login attempt with a correct master password from a foreign IP address, typically based in Brazil. In an email to The Record today, the company said it had not seen any evidence that accounts were successfully compromised in the recent attack that appears to have started earlier this week, on Monday. Password manager app LastPass said today that a threat actor has launched a credential stuffing attack against its users in an attempt to gain access to their cloud-hosted password vaults.
