Malicious websites could steal passwords with a fake LastPass login prompt indistinguishable from the real one.
Users of password manager LastPass should beware of phishing attempts that impersonate the program's browser extension pop-ups to steal their passwords, warns security expert Sean Cassidy.