logo

Cryptocurrency theft attacks traced to 2022 LastPass breach

ID: 0e9e6d1a-673a-5d72-ac59-40aaaa6bf7cd

STIX ID: report--0e9e6d1a-673a-5d72-ac59-40aaaa6bf7cd

Feed Name: Bleeping Computer

Threat Score
75/100

Date Published: 2026-01-02

Date Updated: 2026-04-20

Author: Lawrence Abrams

...
...

TRM Labs traced ongoing cryptocurrency thefts and laundering back to encrypted password vaults stolen in the 2022 LastPass breach; attackers appear to have offline-decrypted weak/reused master passwords to extract wallet keys and drained wallets in waves over years, then laundered funds through Wasabi Wallet CoinJoin and Russian-linked exchanges, with investigators seizing and attributing millions in stolen crypto.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.