
- Phishing emails claim victims are dead to steal LastPass master passwords
- Fake site lastpassrecovery[.]com mimics LastPass to harvest credentials and passkeys
- CryptoChameleon group behind attack; targets include crypto wallets and passwordless logins
Scammers are trying to get LastPass user master passwords with a devious phishing email scheme concerning their deaths.