{"id":183433,"date":"2023-10-30T07:45:10","date_gmt":"2023-10-30T02:15:10","guid":{"rendered":"https:\/\/dripp.zone\/news\/?p=183433"},"modified":"2023-10-30T07:45:10","modified_gmt":"2023-10-30T02:15:10","slug":"crypto-thief-steals-4-4m-in-a-day-as-toll-rises-from-lastpass-breach-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/crypto-thief-steals-4-4m-in-a-day-as-toll-rises-from-lastpass-breach-crypto-news\/","title":{"rendered":"Crypto thief steals $4.4M in a day as toll rises from LastPass breach &#8211; Crypto News"},"content":{"rendered":"<div data-v-8081b7b6=\"\">\n<p>At least 25 people have reportedly seen $4.4 million in crypto drained from across 80 wallets due to a 2022 data breach that impacted password storage software LastPass.<\/p>\n<p>In an Oct. 27 X (Twitter) post, pseudonymous on-chain researcher ZachXBT said they and MetaMask developer Taylor Monahan tracked the fund movements of at least 80 wallets compromised on Oct. 25.<\/p>\n<p>\u201cMost, if not all, of the victims are longtime LastPass users and\/or confirm having stored their [crypto wallet] keys\/seeds in LastPass,\u201d Monahan said in an accompanying Chainabuse <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.chainabuse.com\/report\/53eddb18-d11c-43ea-94b5-2f373d55f28f\">report<\/a>.<\/p>\n<blockquote class=\"twitter-tweet\">\n<p lang=\"en\" dir=\"ltr\">Just on October 25, 2023 alone another ~$4.4M was drained from 25+ victims as a result of the LastPass hack. <\/p>\n<p>Cannot stress this enough, if you believe you may have ever stored your seed phrase or keys in LastPass migrate your crypto assets immediately. <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/t.co\/26HsxrlnCb\">pic.twitter.com\/26HsxrlnCb<\/a><\/p>\n<p>\u2014 ZachXBT (@zachxbt) <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/twitter.com\/zachxbt\/status\/1717901088521687330?ref_src=twsrc%5Etfw\">October 27, 2023<\/a><\/p><\/blockquote>\n<p>In December 2022, LastPass disclosed an attacker leveraged information previously stolen in a breach that August to <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/lastpass-attacker-stole-password-vault-data-showing-web2-s-limitations\" data-amp=\"https:\/\/cointelegraph-com.cdn.ampproject.org\/c\/s\/cointelegraph.com\/news\/lastpass-attacker-stole-password-vault-data-showing-web2-s-limitations\/amp\">target a LastPass employee<\/a>, snagging their credentials and decrypting stored customer information.<\/p>\n<p>Also stolen was a backup of encrypted customer vault data which LastPass warned could be decrypted if the attacker brute force guesses the account\u2019s master password.<\/p>\n<p><strong><em>Related: <\/em><\/strong><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/blockchain-bitcoin-congestion-transaction-queues-deter-nefarious-actors-study\" data-amp=\"https:\/\/cointelegraph-com.cdn.ampproject.org\/c\/s\/cointelegraph.com\/news\/blockchain-bitcoin-congestion-transaction-queues-deter-nefarious-actors-study\/amp\"><strong><em>Blockchain congestion and transaction queues actually deter \u2018nefarious actors\u2019: Study<\/em><\/strong><\/a><\/p>\n<p>In a September blog <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/krebsonsecurity.com\/2023\/09\/experts-fear-crooks-are-cracking-keys-stolen-in-lastpass-breach\/\">post<\/a>, cybersecurity journalist Brian Krebs reported some of the LastPass customer vaults had seemingly been cracked and over $35 million worth of crypto had been stolen from around 150 victims.<\/p>\n<p>In January, LastPass was <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/news\/lastpass-data-breach-led-to-53k-in-bitcoin-stolen-lawsuit-alleges\" data-amp=\"https:\/\/cointelegraph-com.cdn.ampproject.org\/c\/s\/cointelegraph.com\/news\/lastpass-data-breach-led-to-53k-in-bitcoin-stolen-lawsuit-alleges\/amp\">hit with a class-action suit<\/a> from individuals claiming the August 2022 breach resulted in the theft of around $53,000 worth of Bitcoin (<a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/bitcoin-price\">BTC<\/a>).<\/p>\n<p>In his latest X post, ZachXBT advised anyone who ever stored a wallet seed or private key in LastPass to \u201cmigrate your crypto assets immediately.\u201d<\/p>\n<p><strong><em>Magazine: <\/em><\/strong><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/cointelegraph.com\/magazine\/deposit-risk-crypto-exchanges-money\/\"><strong><em>Deposit risk: What do crypto exchanges really do with your money?<\/em><\/strong><\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>At least 25 people have reportedly seen $4.4 million in crypto drained from across 80 wallets due to a 2022 data breach that impacted password storage software LastPass. In an Oct. 27 X (Twitter) post, pseudonymous on-chain researcher ZachXBT said they and MetaMask developer Taylor Monahan tracked the fund movements of at least 80 wallets [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":183434,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[235,203,210,234,231,232,237,238,236,233],"class_list":["post-183433","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blockchain","tag-bitcoin","tag-crypto-currency","tag-elon-musk","tag-ethereum","tag-hyperledger","tag-ibm","tag-mining","tag-nodes","tag-spacex","tag-tesla"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/183433","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=183433"}],"version-history":[{"count":2,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/183433\/revisions"}],"predecessor-version":[{"id":183436,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/183433\/revisions\/183436"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/183434"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=183433"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=183433"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=183433"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}