Cyberattackers Target LastPass, Top Password Managers

Multiple, active phishing campaigns are impersonating major password managers (1Password, LastPass, Bitwarden) to trick users into disclosing master passwords or downloading maliciously repackaged legitimate tools; one observed chain used a modified Syncro installer to deploy ScreenConnect RMM for remote access. These attacks pose high-impact risks because control of a master password can expose many accounts, and attackers leveraged social engineering and legitimate software to evade detection, while vendor-recommended MFA and additional protections can mitigate some risk.