Hackers targeting LastPass users managed to steal $5.36 million, leaving 40 more victims in financial turmoil just days before Christmas.
The incident adds to the growing list of thefts linked to the December 2022 LastPass data breach, where hackers gained access to an encrypted backup of customers’ vault data, according to a recent report. report by Chainabuse.
The total amount stolen from LastPass users is now approaching $45 million. Before During this latest heist, at least $35 million was reported stolen. Another theft, on October 25, 2024, resulted in an additional $4.4 million being taken from user accounts.
EXPLORE: Tax guide to cryptocurrencies 2024
Cybersecurity experts issue new warnings
The latest attack involved converting stolen funds into Ether (ETH) before being laundered through “various instant exchanges,” according to blockchain investigator ZachXBT.
On December 17, 2024, ZachXBT shared on-chain evidence of the attack with his 48,400 Telegram followers and submitted the results to crypto scam reporting platform Chainabuse.
The recent surge in thefts has prompted new warnings from cybersecurity experts. The white hat hacker collective Security Alliance (SEAL) pointed out that all private keys and seed phrases stored on LastPass Before 2023 is in danger.
In a Dec. 16 post on X (formerly Twitter), SEAL warned, “Move your assets before the hackers move them for you.”
Remember, if you already stored your private keys or seed phrases in LastPass before 2023, your funds could be at risk. We’ve seen over 15 cases of potential LastPass-related hacks TODAY
Move your assets before hackers move them for you. For more information, keep reading
– Security Alliance (@_SEAL_Org) December 16, 2024
Remember, if you already stored your private keys or seed phrases in LastPass before 2023, your funds could be at risk. We’ve seen over 15 cases of potential LastPass-related hacks TODAY
The LastPass breach didn’t just affect crypto funds. In May, approximately $250 million in non-crypto funds were stolen, affecting “tens of thousands” of users.
Tay, a blockchain researcher, also highlighted these losses in a recent social media post. Both SEAL and Tay are urging former LastPass users to transfer their funds from the platform before it’s too late.
EXPLORE: 17 Best Cryptos to Buy Now in 2024
Christmas season or “hacker season”
The latest wave of LastPass-related thefts comes amid a broader rise in scams heading into the Christmas period.
Blockchain security company Cyvers dubbed it “hacker season” and advised users to be careful with holiday-themed deals and promotions. They warn against sharing two-factor authentication (2FA) codes and advise users to avoid connecting to free public Wi-Fi networks.
—
Tis the season for having fun…and for hackers to be bad.
December isn’t just about mistletoe and honey: it’s also hacker season; Between shopping sprees, party distractions and late-night deals, it’s open season for scams.
Here is your crypto survival… 
Cyvers Alerts Social media giant Meta also issued a warning to its users, highlighting fraudulent campaigns including fake Christmas gift promotions, fraudulent sales of Christmas decorations and counterfeit retail coupons.
The increase in cybercrime could be an attempt by fraudsters to recoup their losses after phishing attacks fell 53% in November, amounting to $9.3 million in losses.
More recently, cybersecurity company Cado Security Labs warned that Web3 professionals are the latest victims of a sophisticated malware campaign that uses fake meeting apps to steal sensitive credentials and crypto assets.
Earlier this month, Tara Gould, head of threat research at Cado, detailed how fraudsters exploit artificial intelligence (AI) to create compelling websites and social media profiles that mimic legitimate businesses.
The malicious app, initially called “Meeten”, has undergone several name changes, now operating under the name “Meetio” and previously using domains such as Clusee.com, Cuesee, Meeten.gg and Meetone.gg.
EXPLORE: $300 Million Exploit: Japan’s DMM Bitcoin Exchange Suffers Largest Hack of 2024
The post LastPass Hackers Steal $5.36 Million From Users Days Before Christmas appeared first on 99Bitcoins.
