LastPass 'digital will' phishing attack uses fake death certificate emails

With so much of our lives wrapped up in digital identities and platforms, you might want to spare a thought as to how your loved ones can get into things like your bank accounts or social media after you pay your coins to the ferryman. Password manager LastPass has a feature that can pass your credentials on to your next of kin… and, unsurprisingly, it’s being exploited by phishing scams.

It’s a sneaky and distasteful campaign, starting with an email spoofed from “ [email protected] ” that claims someone uploaded a death certificate to request access to your LastPass account. That’s an alarming thing to read if you’re still alive, so you might just lower your defenses long enough to click on the link to “lastpassrecovery[dot]com” in the phony email that claims to stop the process. Bam