LastPass users vulnerable to Phishing attacks

[Mohammad]

The potential dangers of storing all your important passwords in a single place have been exposed by a most recent attack againstLastPass users. The Phishing attack, it is reported does not require any special skills but exploits the existing flaws in the design elements of the password manager’s core functions. The attack allows the attacker to take full control of LastPass user’s email, password, and even two-factor authentication code, giving full access to all passwords and documents stored in LastPass.

http://news.thewindowsclub.com/lastpass-...cks-81614/