Back Feeds.4Sysops

Phishing campaigns target LastPass and Bitwarden users with fake security alerts

Feeds.4Sysops •IT News • July 14, 2026

A sophisticated phishing campaign is currently targeting users of LastPass and Bitwarden by sending fraudulent security notifications. These emails use spoofed domains like lastpassnewsletter.com to trick recipients into believing their account security policies have changed. The messages often include urgent calls to action, such as reviewing updated terms or responding to alleged unauthorized access attempts. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Campaign Targets LastPass and Bitwarden Users with Fake Alerts A phishing campaign is targeting LastPass and Bitwarden users through fraudulent emails that mimic legitimate security notifications. These emails, sent from spoofed domains like lastpassnewsletter.com, claim to inform users of changes to security policies and prompt them to click on links leading to malicious websites. The fake sites impersonate DocuSign and aim to trick users into downloading harmful files. LastPass confirmed that their systems were not compromised, and the phishing emails did not originate from their infrastructure. Users are advised to change their master passwords if they entered credentials on these phishing sites. Similar phishing attempts were reported earlier in the year, indicating a persistent threat to users of these services. The malicious websites have since been taken offline, but the campaign remains a significant concern. 6 sources 52

Extracted Entities

Phishing campaigns target LastPass and Bitwarden users with fake security alerts

The full story

Extracted Entities

Attack Types (1)

Domains (1)

MITRE ATT&CK (1)