Product
LastPass Authenticator
- First Reported
- Sep 18, 2026
- Latest Reported
- Sep 21, 2026
Reported Context (3)
- A fake LastPass Authenticator installer on GitHub delivered a signed Windows kernel driver that disabled security tools before a password stealer harvested credentials, wallet files, and session data. Fake LastPass Authenticator Installer Uses Signed Driver to Disable Security Tools and Steal Credentials
- A fake LastPass Authenticator distributed via GitHub has led to the discovery of a broad impersonation campaign delivering infostealer malware, LastPass reports. Fake LastPass Apps Deliver Rapuncel Stealer and a Kernel Driver Targeting Security Tools
- The attack chain begins when victims search for LastPass Authenticator or other popular software and follow links to fake GitHub repos. Fake GitHub Repositories Deliver Rapuncel Infostealer and EDR-Killing Driver
Malware (3)
People (1)
MITRE ATT&CK (13)
Vendors (4)
Products (9)
Tools (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.