Hackers Pilfer Additional $5.4 Million from LastPass Breach Victims
Over 40 users have lost approximately $5.4 million due to an attack linked to the 2022 breach of the password storage service LastPass. This was reported by on-chain detective ZachXBT.
According to updated data from ZachXBT, the damage amounted to $12.38 million, affecting over 100 addresses.
The stolen funds were converted into ETH and then withdrawn in Bitcoin.
Two years ago, hackers managed to breach the service and copy a backup of user data, which included keys, API tokens, and MFA seeds.
Prior to this, the perpetrators had already used data stolen from LastPass.
On 25 October 2023, at least 25 people lost cryptocurrencies worth $4.4 million from 80 wallets in a single day.
Another series of transactions related to this breach was recorded in February 2024, with damages exceeding $6.2 million.
Cybersecurity expert ZachXBT and other specialists recommended users transfer funds to secure wallets if they suspect access compromise.
In mid-December, the code for the macOS Stealer Trojan malware, designed to steal assets, was made publicly available.
Рассылки ForkLog: держите руку на пульсе биткоин-индустрии!