4 ms·

I'd get in touch with LastPass support asap to see if they have a digital trail to help you figure out what happened. I'd also guess the most plausible situati

I'd get in touch with LastPass support asap to see if they have a digital trail to help you figure out what happened. I'd also guess the most plausible situation would be malware on your computer that managed to sniff your credentials in-transit/clipboard/memory/browser/keyboard and exfiltrate it to some shady folks.

gregsadetsky 5y ago
Thanks Sending emails to support@lastpass.com doesn't work ("This inbox is not monitored") and I have to upgrade my account to contact their support, which I'll do right away. EDIT: after checking, the login attempt does appear in my Account History (my original email said it didn't -- I wasn't looking in the right place)
- akdor1154 5y ago
  I'm pretty sure you can get a full login attempt history from them in the ui - can't verify though, don't use LP anymore. Try a bogus attempt yourself with wrong PW, or from a cloud host/vpn/etc to verify the audit log you can access. Assuming it does list your attempts, then yeah, it would have to be phishing/lp bug.
  - gregsadetsky 5y ago
    Yeah, thanks, I was finally able to find my Account History, and the foiled login from Brazil does appear there. So it seems like the email wasn't phishing.
- duerra 5y ago
  Heh, I reached out to that same email literally earlier today to complain about their abysmal Android support, and I'm already a paying customer. I'm not happy with their non-response automated email and will be looking for a good alternative.
- ChrisMarshallNY 5y ago
  I suspect that it was a random phishing attempt. > Login attempt blocked > Hello, Someone just used your master password to try to log in to your account from a device or location we didn't recognize. LastPass blocked this attempt, but you should take a closer look. Looks fairly classic. Might want to look at the email headers, to see if it really came from LastPass. I get about ten of these a day. Some are scarily well-done. Most are for banks that I don't use, but I also get a lot of attempts to grab my AppleID. My Apple (mac.com) address is an OG address, and has been making the spammer circuit for over a decade. I suspect that I actually get hundreds of spams a day, but Apple is good at nuking most of them, before they reach my inbox.
  - vbo 5y ago
    Quick note that apple allows you to download a recovery code and disable all other account recovery mechanisms which I found incredibily soothing.
    - aNopBxEjtX 5y ago
      I sense sarcasm, but in case my sense is off, there is a webapp which allows you to log into your apple account and webapps are known to sometimes have security issues.
  - gregsadetsky 5y ago
    I checked and the same information regarding the attempted login appears in my LastPass "Account History". I also talked to support and they've confirmed this.

gregsadetsky 5y ago

Thanks Sending emails to support@lastpass.com doesn't work ("This inbox is not monitored") and I have to upgrade my account to contact their support, which I'll do right away. EDIT: after checking, the login attempt does appear in my Account History (my original email said it didn't -- I wasn't looking in the right place)

akdor1154 5y ago
I'm pretty sure you can get a full login attempt history from them in the ui - can't verify though, don't use LP anymore. Try a bogus attempt yourself with wrong PW, or from a cloud host/vpn/etc to verify the audit log you can access. Assuming it does list your attempts, then yeah, it would have to be phishing/lp bug.
- gregsadetsky 5y ago
  Yeah, thanks, I was finally able to find my Account History, and the foiled login from Brazil does appear there. So it seems like the email wasn't phishing.
duerra 5y ago
Heh, I reached out to that same email literally earlier today to complain about their abysmal Android support, and I'm already a paying customer. I'm not happy with their non-response automated email and will be looking for a good alternative.
ChrisMarshallNY 5y ago
I suspect that it was a random phishing attempt. > Login attempt blocked > Hello, Someone just used your master password to try to log in to your account from a device or location we didn't recognize. LastPass blocked this attempt, but you should take a closer look. Looks fairly classic. Might want to look at the email headers, to see if it really came from LastPass. I get about ten of these a day. Some are scarily well-done. Most are for banks that I don't use, but I also get a lot of attempts to grab my AppleID. My Apple (mac.com) address is an OG address, and has been making the spammer circuit for over a decade. I suspect that I actually get hundreds of spams a day, but Apple is good at nuking most of them, before they reach my inbox.
- vbo 5y ago
  Quick note that apple allows you to download a recovery code and disable all other account recovery mechanisms which I found incredibily soothing.
  - aNopBxEjtX 5y ago
    I sense sarcasm, but in case my sense is off, there is a webapp which allows you to log into your apple account and webapps are known to sometimes have security issues.
- gregsadetsky 5y ago
  I checked and the same information regarding the attempted login appears in my LastPass "Account History". I also talked to support and they've confirmed this.