If you use LastPass as your password manager, you should read a post by TechRadar that begins:
Be careful when downloading the LastPass Authenticator app – there are impostors out there that can disable your antivirus and wreak havoc on your computer.
LastPass recently discovered an elaborate scheme to get people infected with malware – a spoofed website, SEO poisoning, DLL sideloading, and a malware loader delivering never-before-seen payload that can kill endpoint protection and antivirus solutions.
According to the password manager, users searching for “LastPass Authenticator download” or similar keywords will get a GitHub page rather high on the search engine results pages. At a glance, the page looks almost identical to the authentic LastPass offering – however, it redirects users to a separate one, hosted on attacker-controlled infrastructure and delivering a large .ZIP file with multiple files.
Read more of their caution at TechRadar.
