X-Industry

Blockchain investigation firm TRM Labs says ongoing cryptocurrency thefts have been traced to the 2022 LastPass breach, with attackers draining wallets years after encrypted vaults were stolen and laundering the crypto through Russian exchanges.   In 2022, LastPass disclosed that attackers breached its systems by compromising a developer environment, stealing portions of the company's source code and proprietary technical information.[1]

In a later, but related security incident, the hackers bre

In early September of 2022, we reported on a security incident that occurred at LastPass in late August.  As a reminder, LastPass is a password manager, which is software intended to facilitate encrypted password storage with easy retrieval.  Other popular password managers include BitWarden, Dashlane, and 1Password.  LastPass is very possible among the more well-known password managers and has had several security incidents even before the incident we reported on in September.  Unfortunately, t

At its core, LastPass is a password manager.  A password manager is a software service that allows users to store encrypted passwords so they can be accessed easily when they are needed.  LastPass is indeed very popular, but it is only one of many widely known password managers, each with their own features, advantages, and disadvantages.  Other commonly known password managers include BitWarden, Dashlane, 1Password.

The apparent necessity for password managers has been prompted by the fact that

Activity Summary - Week Ending on 2 September 2022:

• Red Sky Alliance identified 37,328 connections from new IP’s checking in with our Sinkholes
• capital hit 82x
• Analysts identified 1,905 new IP addresses participating in various Botnets
• Git Woes
• Chile SERNAC Cyber Attack
• LastPass
• Free Analytical Tools
• Burp Suite
• Gophish
• Snort

Link to full report: IR-22-245-001_weekly245.pdf