ZachXBT

<div class="sg-post-des">
 Estimates in September revealed that at least $35 million in crypto has been stolen from victims of the LastPass breach since 2022, with the latest hack adding to the toll.
</div>
<div class="cointelegraph">
 At least 25 people have reportedly seen $4.4 million in crypto drained from across 80 wallets due to a 2022 data <a rel="noopener noreferrer nofollow" title="breach" href="https://thebittimes.com/tag/breach.html">breach</a> that impacted password storage software LastPass.
 In an Oct. 27 X (Twitter) post, pseudonymous on-chain researcher ZachXBT said they and MetaMask developer Taylor Monahan tracked the fund movements of at least 80 wallets compromised on Oct. 25.
 “Most, if not all, of the victims are longtime LastPass users and/or confirm having stored their [crypto wallet] keys/seeds in LastPass,” Monahan said in an accompanying Chainabuse report.
 <blockquote class="twitter-tweet">
 Just on October 25, 2023 alone another ~$4.4M was drained from 25+ victims as a result of the LastPass hack. Cannot stress this enough, if you believe you may have ever stored your seed phrase or keys in LastPass migrate your crypto assets immediately. pic.twitter.com/26HsxrlnCb— ZachXBT (@zachxbt) October 27, 2023
 </blockquote>
 In December 2022, LastPass disclosed an attacker leveraged information previously stolen in a <a rel="noopener noreferrer nofollow" title="breach" href="https://thebittimes.com/tag/breach.html">breach</a> that August to target a LastPass employee, snagging their credentials and decrypting stored customer information.
 Also stolen was a backup of encrypted customer vault data which LastPass warned could be decrypted if the attacker brute force guesses the account’s master password.
 Related: Blockchain congestion and transaction queues actually deter ‘nefarious actors’: Study
 In a September blog post, cybersecurity journalist Brian Krebs reported some of the LastPass customer vaults had seemingly been cracked and over $35 million worth of crypto had been stolen from around 150 victims.
 In January, LastPass was hit with a class-action suit from individuals claiming the August 2022 <a rel="noopener noreferrer nofollow" title="breach" href="https://thebittimes.com/tag/breach.html">breach</a> resulted in the theft of around $53,000 worth of Bitcoin (BTC).
 In his latest X post, ZachXBT advised anyone who ever stored a wallet seed or private key in LastPass to “migrate your crypto assets immediately.”
 Magazine: Deposit risk: What do crypto exchanges really do with your money?
 <template data-name="subscription_form" data-type="law_decoded"></template>
</div>
Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/crypto-thief-steals-4-4m-in-a-day-as-toll-rises-from-lastpass-breach-tbt68279.html">https://thebittimes.com/crypto-thief-steals-4-4m-in-a-day-as-toll-rises-from-lastpass-breach-tbt68279.html</a>

Crypto thief steals $4.4M in a day as toll rises from LastPass breach

TheBitTimes

Other articles published on Oct 30, 2023

SBF trial day 15: “I was trying to help” FTX founder claims on third day of testimony

X (Twitter) Now Valued at $19 Billion: Report

Chainlink Price Stagnates as Bulls Struggle for Momentum

Kasikorn Bank Acquires Satang Crypto Exchange for $103M, Marks Major Leap into Thailand’s Crypto ...

White House issues executive order on AI risk management

Polkadot (DOT) surges 8% with staking dashboard upgrade

Join our free newsletter for daily crypto updates!