Beware of Phishing Attempts

If you’ve received an alarming email stating that a death certificate has been associated with your LastPass account, it’s a phishing attempt.

LastPass, a leading password management service, recently shared a blog outlining this scam. The fraudulent message claims a family member is attempting to access your account using a death certificate, urging you to respond if you are alive.

What Happens If You Reply?

Responding to this email will prompt scammers to fabricate a case number and redirect you to a fake website designed to capture your credentials, putting your LastPass account at risk.

Scammers have even contacted some users directly, asking them to reply and visit a fictitious site they created.

According to Google Threat Intelligence, this phishing tactic is linked to the cybercriminal group CryptoChameleon, which was previously involved in phishing campaigns targeting LastPass users. If you receive such an email, it is advisable to forward it to [email protected] and verify the sender’s address directly against official channels.