🚨 LastPass phishing campaign uncovered
Fake “urgent backup” emails redirect users to malicious sites designed to steal master passwords — granting full vault access.
LastPass confirms it never requests this via email.
Thoughts on improving phishing resilience for password manager users?