Users of LastPass have been targeted by a phishing campaign.

A phishing campaign beginning around January 19 sends fake maintenance emails urging LastPass users to “back up” their vaults within 24 hours. The emails contained links to a fake LastPass domain designed to steal users’ master passwords. LastPass confirmed the messages are fraudulent and emphasized it never asks customers to urgently back up vaults or share master passwords.

Read more:

https://www.securityweek.com/lastpass-users-targeted-with-backup-themed-phishing-emails/