Summary
The fallout from the 2022 LastPass hack continues, with $5.36 million stolen from 40 crypto wallets.
The breach exposed encrypted password vaults, along with customer keys and MFA seeds. Weak or reused master passwords may have allowed attackers to brute force access to accounts.
Blockchain expert ZachXBT reports ongoing thefts, including $4.4 million in October 2023 and $6.2 million in February 2024, warning users to secure assets immediately.
Total losses linked to the hack exceed $35 million.
Really no one should use Lastpass nowadays.