It is crucial for companies to ensure that their security systems are up-to-date and that employees are aware of the risks of third-party software and the importance of keeping personal devices secure. This latest attack on LastPass highlights the importance of security compliance in organizations. LastPass worked with incident response experts at Mandiant to perform forensics. The attackers then exported the native corporate vault entries and content of shared folders containing encrypted secure notes, access and decryption keys needed to access LastPass production backups and other critical database backups.

The attackers planted keylogger malware on an employee's personal computer to capture the master password, gaining access to the DevOps engineer's LastPass corporate vault.

LastPass has confirmed a second attack, where threat actors combined data stolen from an August breach with information from a third-party data breach and a vulnerability in a third-party media software package. Lightning never strikes in one place twice - or does it?

Lastpass family shared folder