Fake Lastpass emails pose as password vault backup alerts

LastPass warns of an active phishing campaign (began Jan 19) impersonating maintenance/backup notifications to trick users into creating a fake encrypted backup and surrendering vault credentials; malicious emails used sender addresses such as [email protected] and [email protected] and redirected victims to a phishing domain (mail-lastpass.com).