Fake LastPass death claims used to breach password vaults

LastPass warns of an active CryptoChameleon (UNC5356) phishing campaign that sends fake inheritance/access-request emails and directs victims to fraudulent sites (for example: lastpassrecovery.com, mypasskey.info, passkeysetup.com) and even phone-based social engineering to steal master passwords and passkeys; the activity targets password-manager users and is financially motivated, expanding prior crypto-focused phishing operations.