Password manager LastPass has announced the existence of a fake version named "LassPass", a malicious clone that passed Apple's App Store security review.
The company stated that the developer of the fake app is listed as Parvati Patel and that it copies LastPass's branding and user interface. The developer of the legitimate LastPass app is LogMeIn Inc. The company noted that it is working to have the fake app removed from the App Store as soon as possible, and that Apple has already taken steps to do so.
This is not the first incident affecting LastPass's security. In October 2022, a series of breaches occurred in which users' password vaults were stolen. However, the vaults could not be decrypted, meaning hackers could only gain access by guessing or cracking the master password.
Given Apple's strict controls, it is rare to find such high-profile fake apps on the App Store. However, it is known that fake and malicious apps are frequently found on Google's Play Store. Recently, 6 malicious Android apps were detected, including fake chat applications containing malware that steals call logs and SMS messages.
News Source: 12punto
