Fake LastPass support email threads try to steal vault passwords

LastPass warned of an active phishing campaign that impersonates LastPass Support with spoofed email threads and urgent subject lines to trick users into visiting a credential-harvesting site (notably verify-lastpass.com and similar redirected URLs). The report notes attackers use varied sender addresses and display-name spoofing, emphasizes that LastPass infrastructure is not compromised, and urges users to never share their master password and to report suspicious messages to [email protected].