7

Fake LastPass Password Manager Spotted on Apple's App Store - Slashdot

 7 months ago
source link: https://it.slashdot.org/story/24/02/08/1957224/fake-lastpass-password-manager-spotted-on-apples-app-store
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client

Fake LastPass Password Manager Spotted on Apple's App Store

Sign up for the Slashdot newsletter! OR check out the new Slashdot job board to browse remote jobs or jobs in your areaDo you develop on GitHub? You can keep using GitHub but automatically sync your GitHub releases to SourceForge quickly and easily with this tool so your projects have a backup location, and get your project in front of SourceForge's nearly 30 million monthly users. It takes less than a minute. Get new users downloading your project releases today!
×
LastPass is warning that a fake copy of its app is being distributed on the Apple App Store, likely used as a phishing app to steal users' credentials. From a report: The fake app uses a similar name to the genuine app, a similar icon, and a red-themed interface made to appear close to the brand's authentic design. However, the fake app's name is 'LassPass,' instead of 'LastPass,' and it has a publisher of 'Parvati Patel.' In addition, there's only a single rating (the real app has over 52 thousand), with only four reviews that warn about it being fake.

No limit on how evil and creative the scammers can get.

Also realize that if you want the Microsoft Authenticator app on Android there's now a massive number of them and it's almost to the level that you have to take your chances.

  • I'm just staying with Keepass, it's done everything that I needed and almost nothing I don't for 15 or more years and I've convinced two of my former employers to standardize on it. I don't give a rip if it doesn't work on an iToy, I wouldn't want one anyway.

    • Re:

      While I use Keepass every day on PC, I think it is a mistake to keep your passwords on the phone. You can't control what runs on your phone to a large extent. Google and Apple running their processes, service providers running theirs, any app that likes can run a service and to request accessibility control. Plus your phone can get stolen and broken into.
      On PC I can see all processes and can also use second factor for Keepass (a key file on the USB) which I can disconnect when I am not there. Even if a da
  • There’s apparently no limit on the amount of incompetence either.

    Apple accepts a security-centric app from a major vendor and charges the infamous 30% Apple Store tax for it, and then does nothing to protect the integrity of that security-centric app (or any other app for that matter) by allowing a scammer to pose as a major vendor and push a fake security-centric app behind the “walled garden”?

    FUCK accepting that nonsense. If the world is going to be reduced to a handful of “approv

    • That's where the whole thing goes to hell, isn't it? Apple claims their app store keeps you safe, apple users claim the same thing, but apple does nothing at all to prevent malware from reaching the store, and thus customer devices. And since customers think that they do, they tend to trust anything in the app store. Apple's promises lead to a false sense of security by design.

      • Re:

        It's unfair to say that Apple does _nothing_ to prevent malware reaching their store, but they certainly do slip up and let some through. Needless to say, whoever approved that particular app is going to be in hot water.

        https://techcrunch.com/2023/05... [techcrunch.com]

        As you say, you shouldn't completely trust Apple and their store. Employ a little scepticism, and don't expect that Apple will be 100% effective in blocking bad apps. It only makes sense that they can't.

  • Re:

    I dont know how is this "insightful". There is only one Microsoft Authenticatior in the Android store. I just did a search on the web and and in on my phone. On the web it came up first and on my phone second. If you have more than one brain cell you can find that the app is offered by Microsoft Corporation and that is the real one.
    Slashdot moderation is deteriorated to the point of being useless.
    • Search for just Authenticator. Typing on a touch screen sucks so you don't want to type more than necessary and omitting the word Microsoft is common.


About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK