LastPass Warns of Fake Maintenance Message Tracking Users to Steal Master Passwords

Cybersecuritynews •Abinaya • January 21, 2026

A critical security alert regarding an active phishing campaign that commenced on January 19, 2026. The malicious actors are impersonating LastPass support staff and sending fraudulent emails claiming urgent vault backup requirements to harvest master passwords from unsuspecting users. The phishing emails employ social engineering tactics by creating artificial urgency, falsely claiming that LastPass maintenance […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

LastPass Issues Warning on Phishing Campaign Targeting Master Passwords On January 19, 2026, LastPass issued a security alert about an active phishing campaign. Malicious actors are impersonating LastPass support staff and sending fraudulent emails that create urgency around vault backup requirements to steal users' master passwords. Users are advised to be cautious of these deceptive messages. 3 sources 25

Extracted Entities

LastPass Warns of Fake Maintenance Message Tracking Users to Steal Master Passwords

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)