{"id":23886,"date":"2024-02-08T07:10:31","date_gmt":"2024-02-08T15:10:31","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2024\/02\/08\/news-17616\/"},"modified":"2024-02-08T07:10:31","modified_gmt":"2024-02-08T15:10:31","slug":"news-17616","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2024\/02\/08\/news-17616\/","title":{"rendered":"Warning from LastPass as fake app found on Apple App Store"},"content":{"rendered":"\n<p>Password Manager LastPass <a href=\"https:\/\/blog.lastpass.com\/2024\/02\/warning-fraudulent-app-impersonating-lastpass-currently-available-in-apple-app-store\/\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">has warned<\/a> about a fraudulent app called \u201cLassPass Password Manager\u201d which it found on the Apple App Store.<\/p>\n<p>The app closely mimics the branding and appearance of LastPass, right down to the interface. So, even if the name was a \u201chappy accident\u201d it seems clear that this was a purposeful attempt to trick users installing the fake app.<\/p>\n<p>The fake app can be recognized not only by the name, but other misspellings in the screenshots, and the app lists Parvati Patel as the developer and the privacy policy as hosted at bluneel[.]com. The developer of the legitimate LastPass app is LogMeIn, Inc.\u00a0<\/p>\n<p>While using a genuine password manager provides extra security, entrusting your passwords to an app that is a rip-off does not. Obviously, storing all your passwords in an app that is not trustworthy can get you in all kinds of trouble, including <a href=\"https:\/\/www.malwarebytes.com\/identity-theft-protection\">identity theft<\/a>.<\/p>\n<p>We have not tested if the app sends your passwords to a third-party, but we should assume that it does just that.<\/p>\n<p>In the App Store the impersonator claims to be \u201cTrusted by over 1+ million users and 10,000+ businesses\u201d which clearly can\u2019t be right and was most certainly copied from LastPass.<\/p>\n<p>LastPass states that it is:<\/p>\n<blockquote class=\"wp-block-quote\">\n<p>\u201c&#8230; actively working to get this application taken down as soon as possible, and will continue to monitor for fraudulent clones of our applications and\/or infringements upon our intellectual property\u201c<\/p>\n<\/blockquote>\n<p>But at the time of writing the app was still available in the Apple App Store.<\/p>\n<figure class=\"wp-block-image aligncenter size-full\"><img decoding=\"async\" loading=\"lazy\" width=\"810\" height=\"720\" src=\"https:\/\/www.malwarebytes.com\/wp-content\/uploads\/sites\/2\/2024\/02\/LassPass.png\" alt=\"LassPass is available in the App Store\" class=\"wp-image-103894\" \/><\/figure>\n<p><a href=\"https:\/\/www.malwarebytes.com\/premium\">Malwarebytes Premium<\/a> and <a href=\"https:\/\/www.malwarebytes.com\/browserguard\">Malwarebytes Browser Guard<\/a> block the domain bluneel[.]com so users will see a warning about the trustworthiness of the app. <\/p>\n<hr class=\"wp-block-separator has-alpha-channel-opacity is-style-wide\" \/>\n<p><strong>We don&#8217;t just report on threats &#8211; we help safeguard your entire digital identit<\/strong>y<\/p>\n<p>Cybersecurity risks should never spread beyond a headline. Protect your\u2014and your family&#8217;s\u2014personal information by using\u00a0<a href=\"https:\/\/www.malwarebytes.com\/identity-theft-protection\" target=\"_blank\" rel=\"noreferrer noopener\">Malwarebytes Identity Theft Protection<\/a>.<\/p>\n<p><a href=\"https:\/\/www.malwarebytes.com\/blog\/news\/2024\/02\/warning-from-lastpass-as-fake-app-found-on-apple-app-store\" target=\"bwo\" >https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> LastPass has warned about a fake app called LassPass, available in the Apple App Store. <\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"colormag_page_container_layout":"default_layout","colormag_page_sidebar_layout":"default_layout","footnotes":""},"categories":[10488,10378],"tags":[16484,2211,30848,19012,32],"class_list":["post-23886","post","type-post","status-publish","format-standard","hentry","category-malwarebytes","category-security","tag-app-store","tag-apple","tag-lasspass","tag-lastpass","tag-news"],"_links":{"self":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/23886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/comments?post=23886"}],"version-history":[{"count":0,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/posts\/23886\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/media?parent=23886"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/categories?post=23886"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.palada.net\/index.php\/wp-json\/wp\/v2\/tags?post=23886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}