Network Security Internet Technology Development Database Servers Mobile Phone Android Software Apple Software Computer Software News IT Information

In addition to Weibo, there is also WeChat

Please pay attention

WeChat public account

Shulou

LastPass updates security bulletin: an attacker successfully obtains the company's decryption library by hacking into an employee's home computer

2025-04-08 Update From: SLTechnology News&Howtos shulou NAV: SLTechnology News&Howtos > IT Information >

Share

Shulou(Shulou.com)11/24 Report--

CTOnews.com, February 28 (Xinhua)-- password management tool LastPass announced on Monday that the attacker associated with the previous attack had hacked into an employee's home computer and obtained a cryptographic library (decrypted vault) that only a few corporate developers could use.

It is reported that the attacker attempted to attack LastPass on August 12, 2022, and carried out "a series of new reconnaissance, enumeration and infiltration activities" between 12 and 26.

In the process, the attacker steals valid credentials from a senior DevOps engineer and accesses the contents of the LastPass data vault. The attacker also accessed the shared cloud storage environment through the data vault.

CTOnews.com translates the content of LastPass as follows:

Target the home computer of a DevOps engineer and use vulnerable third-party media packages to implement the attack. The package enables remote code execution and allows threat actors to implant keylogger malware.

After the employee is authenticated through MFA, the threat participant can capture the employee's master password when entering and gain access to the DevOps engineer's LastPass company vault.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.

Views: 0

*The comments in the above article only represent the author's personal views and do not represent the views and positions of this website. If you have more insights, please feel free to contribute and share.

Share To

IT Information

Wechat

© 2024 shulou.com SLNews company. All rights reserved.

12
Report