Scammers are attempting to trick LastPass users into revealing their credentials by sending oddly worded messages claiming the recipient is deceased.
The phishing scam, suspected to be the work of the CryptoChameleon cyber criminal group, aims to exploit a situation where a person's immediate family may not know how to access their password manager after their death.
Are you sure you’re still alive? If so, you may fall for a phishing scam aimed at getting the master login passwords of LastPass password manager users.
The goal of the scam is to obtain LastPass login credentials and potentially access the user's cryptocurrency wallet to drain its contents.
The scam relies on the recipient clicking on a malicious link if they think the message isn't intended for them.
Author's summary: Scammers target LastPass users with fake death notices.