News for hackers. Stuff that matters.

A comment on Ask HN: How did my LastPass master password get leaked?. Parent comment

Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @05:54PM (#29707923)
You received a "Someone just used your master password to try to log in to your account from a device or location we didn't recognize" email?

And your master password was secure/not used anywhere else, etc.?

Did we all (that's 8 of us now in the thread) get compromised a few years ago (using the LastPass extension?) and someone just mass attempted to try all of those passwords..?

Edit: since you're tracking IPs found in this thread (thanks!) my attacker's was 160.116.189.21 . You also have 1 ip duplicated (160.116.88.235) which was from the same user both times. You can also add 160.116.95.249 which was just posted

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by trajcek on Monday December 27, 2021 @06:04PM (#29708027)
"Someone just used your master password to try to log in to your account from a device or location we didn't recognize. LastPass blocked this attempt, but you should take a closer look."

Could be... I haven't rotated my password in a while. Could you link me to more info about the LastPass compromise that you mentioned?

p.s. My master password is definitely not dictionary material, and it's not used anywhere else, so I am 100% sure it's not a bruteforce / phishing attempt.

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by gregsadetsky on Monday December 27, 2021 @06:20PM (#29708182)
That's so extremely bad and really cannot be a coincidence at this point. We were all owned in the same way years ago...?

The compromise was mentioned here: https://news.ycombinator.com/item?id=29707325

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by ksec on Monday December 27, 2021 @09:20PM (#29709578)
So they had waited all these years, before they act on those Password? Seems like there should be some other explanation.
[ Parent | on HN ]