News for hackers. Stuff that matters.

A comment on Ask HN: How did my LastPass master password get leaked?. Parent comment

Re:Ask HN: How did my LastPass master password get leaked? by wutwutwutwut on Monday December 27, 2021 @04:49PM (#29707208)
Couldn't it just be that someone got a copy of the password some years ago and now sold the list of credentials to someone else, who then tried to use it? Maybe the original owner of the list didn't realize some of the credentials was for LastPass, for example.

I'm still seeing hackers trying to log on using passwords I haven't used in ~10 years, because it's on a list somewhere.

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @05:14PM (#29707462)
I agree, that could make sense.

So LastPass (their extension) may have been hacked ~5 years ago ish, a few people here on the thread were all hacked in the same way, our passwords were sold off, and now the same Brazil IP range just tried all of those passwords.

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by kreetx on Monday December 27, 2021 @06:48PM (#29708395)
Perhaps you can ask the other victims when did they register their accounts to see if that's true?
[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Tuesday December 28, 2021 @09:20AM (#29714012)
I've been trying to ask this to people posting reports, and although there are many "older" accounts (like mine, circa 2017 or older), at least 2 reports are from accounts created this year:

https://news.ycombinator.com/item?id=29710262

https://news.ycombinator.com/item?id=29711950

That would make "more sense" that our credentials weren't stored and unused for years, i.e. that this is possibly a new, recent breach.

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by sillysaurusx on Monday December 27, 2021 @04:55PM (#29707275)
This seems likely.
[ Parent | on HN ]