Phishing Campaign Zeroes in on LastPass Customers

An active phishing campaign is targeting LastPass customers with convincing emails claiming 'scheduled maintenance' and urging users to back up their vaults; recipients who follow the links are directed to credential-harvesting phishing sites. LastPass has warned users to verify senders, enable multifactor authentication, and report suspicious emails, and currently reports no indication of confirmed account compromises.