Phishing Campaign Targets LastPass Users with Fake Death Notifications

Phishing Campaign Targets LastPass Users with Fake Death Notifications

First seen 2 Dec 2025, 18:33 UTC Blog.MalwarebytesBlog.Knowbe4 79% similarity 13.9

Article Content

Browse articles
ThreatCluster

A phishing campaign is targeting LastPass users by sending emails that falsely claim someone has reported the user's death, attempting to gain access to their accounts. The emails feature a subject line stating, 'Legacy Request Opened (URGENT IF YOU ARE NOT DECEASED),' and exploit the digital will feature of LastPass. Users are advised to be cautious and verify any such notifications.

ThreatCluster AI How this analysis works

Community

Browse all →

Tracked Entities in This Story