logo

Fake LastPass maintenance emails target users

ID: 5cbf00d4-3d66-5ddc-9fb8-fc85250227bc

STIX ID: report--5cbf00d4-3d66-5ddc-9fb8-fc85250227bc

Feed Name: Malwarebytes Blog

Threat Score
70/100

Date Published: 2026-01-22

Date Updated: 2026-04-28

...
...

LastPass TIME warns of an active phishing campaign (starting ~2026-01-19) that sends fraudulent "maintenance" emails urging users to "Create Backup Now"; the links lead to credential-stealing domains (e.g., mail-lastpass.com, now taken down). The report includes sample email text, subject lines, guidance to ignore such requests, and recommendations to verify logins directly, use up-to-date anti-malware/web protection, and report phishing to [email protected].

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.