LastPass Warns of Phishing Campaign Attempting to Steal Master Passwords

LastPass warned of an active phishing campaign that impersonates the company and sends urgent emails instructing users to 'backup' their vaults within 24 hours; the malicious link redirects to a fake LastPass login page that captures master passwords, risking compromise of any credentials stored in users' vaults. The campaign began on January 19, is circulating widely, and LastPass is working with partners to take down the sending domain.