The investigation also found the attacker exploited a “compromised endpoint” belonging to a LastPass developer, meaning they hijacked access to the developer's computer, possibly through malware. There is no evidence of any threat actor activity beyond the established timeline.” “During this timeframe, the LastPass security team detected the threat actor’s activity and then contained the incident. “Our investigation revealed that the threat actor’s activity was limited to a four-day period in August 2022,” LastPass said in an update (Opens in a new window) on the breach. The results confirm the hacker only managed to gain access to LastPass’s internal IT systems devoted to software development. The company completed its investigation into the breach with the help of cybersecurity firm Mandiant. However, LastPass has found no evidence the culprit ever tampered with the company’s software code or accessed user information, such as encrypted passwords.
The hacker who infiltrated LastPass last month had access for four days, according to the company’s investigation.
0 kommentar(er)
