LastPass hackers drained $12.4 million worth of ETH from over 100 wallets: ZachXBT

The 2022 LastPass data breach allowed threat actors to steal 12.38 million users in a new attack.

According to blockchain detective ZachXBT, LastPass hackers stole millions in ethereum (eth) from more than 100 wallet addresses between December 16 and 17. The criminals quickly exchanged the ill-gotten wealth from eth to bitcoin (btc), using multiple snapshots. exchanges. You can find a list of affected addresses here.

LastPass is a password management service to protect cryptocurrency wallets. The startup suffered two attacks in 2022, one in August and another in October, resulting in unauthorized access to customer keys, API tokens, multi-factor authentication seeds, and other sensitive security information.

In January 2023, users sued LastPass with a class-action lawsuit. The complaint alleged that the provider failed to protect user data and adopted lax security protocols.

Turbulent times persisted for the company, as criminals leveraged stolen data to execute staggered crypto heists. A cryptocurrency holder blamed LastPass for a $50,000 theft in April 2023, according to a report by crypto.news. Later in October, 25 victims lost $4.4 million due to wallet losses. LastPass came under fire again for the breach.

The latest incident raised questions about future attacks linked to LastPass, as criminals continued to exploit stolen information in 2022. It also reminded the broader crypto community of existing security threats.

Taylor Manohan, MetaMask Developer <a target="_blank" rel="nofollow" href="https://x.com/tayvano_/status/1868791243205230651″ target=”_blank”>urged users migrate funds to new wallets if they have used LastPass before. A white hat coalition called the Security Alliance, or SEAL ORG, also notified users that crypto assets may be at risk if action is not taken.

<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter“>