Hackers stole over $6.2 million in digital property from 22 LastPass customers between Feb. 19 and 20.
Blockchain investigator ZachXBT and Taylor Monahan, a developer related to the crypto pockets MetaMask, revealed in a Feb. 21 submit on social media platform X (previously Twitter) that they meticulously tracked the motion of funds from 41 compromised wallets. These wallets comprised 21 Bitcoin and 20 Ethereum addresses, all impacted by the breach.
Monahan highlighted that the stolen property encompassed numerous cryptocurrencies resembling Cardano, Polygon, Dogecoin, and Wrapped Bitcoin, predominantly on the Ethereum digital machine (EVM) chains. These have been swiftly transformed and transferred to Bitcoin.
Consequently, she urged affected people to report the incident to the US Web Crime Criticism Middle (IC3). Moreover, she suggested LastPass customers to promptly rotate their keys to curtail additional losses from the safety breach.
Final 12 months, ZachXBT and Monahan disclosed that the attackers had stolen over $4 million in digital property from LastPass customers on Oct. 25. On the time, ZachXBT issued a robust advice for LastPass customers who had ever saved their seed phrases or keys on the platform to switch their crypto holdings promptly.
LastPass hack
In December 2022, LastPass, a platform trusted for storing and encrypting consumer passwords, fell sufferer to a breach that compromised its cloud-based storage service.
The assault allowed malicious actors to entry its platform and duplicate a backup of its buyer vault information, containing delicate info resembling web site logins, safe notes, and kind information.
Following the breach, cybercriminals started targetting crypto customers whose seed phrases may need been saved on the platform. Cybersecurity skilled Brian Krebs reported that the breach has resulted within the theft of over $35 million in digital property from 150 victims.
