News for hackers. Stuff that matters.

A comment on Ask HN: How did my LastPass master password get leaked?. Parent comment

Re:Ask HN: How did my LastPass master password get leaked? by 55555 on Monday December 27, 2021 @04:48PM (#29707203)
That’s not a phishing site. That’s standard zero-click /smartlink monetization. It’s a lot to explain and I’m on mobile but it isn’t anything to do with phishing.
[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by sillysaurusx on Monday December 27, 2021 @04:54PM (#29707270)
But, it certainly wasn't from Spectrum (my ISP), but they designed the page to make it look like it was.

I agree that it could be totally unrelated to the root mystery though. But "everyone here fell for malware or got phished" seems like the most likely explanation, even if my answer happens to be otherwise incorrect.

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by aNopBxEjtX on Tuesday December 28, 2021 @03:39PM (#29717834)
the site is an advertising redirect and these same attackers (or at least users of the same IP ranges) use leaked credentials to login to Microsoft/Outlook accounts using SMTP
[ Parent | on HN ]