Tech Break

Jan 18th 2016

Tech Break 2219

LastPass Phishing Attack

Leo explains the latest attack against LastPass

This feed has been discontinued, but you can find the clips in our archives.
Category: TWiT Bits
Phishing attack that could steal LastPass password manager details. LastPass stores user’s passwords in the cloud in an encrypted vault protected by a single username and password. The vault can also be protected using various forms of two-factor authentication. The tool allows hackers to mimic the look and feel of the LastPass browser plugin and site, owing to the way the password manager uses browser pop-up boxes or banners called “viewports” to request a user’s password and two-factor authentication key.

<p>Bandwidth for TWiT Bits is provided by <a href="http://cachefly.com/&quot; target="_blank">Cachefly</a>.</p>