Do not click the LastPass “create backup” link — it is a phishing scam Source: The Register www.theregister.com/2026/01/2… Password managers are attractive targets for attackers because they store access to a wide range of sensitive accounts. LastPass has issued a warning to customers about a phishing campaign that falsely claims urgent action is required ahead of scheduled maintenance. According to LastPass, the phishing campaign began around Jan. 19, with emails sent from multiple addresses using various subject lines. All messages reference alleged LastPass maintenance and urge recipients to back up their vaults within 24 hours. In a security advisory issued on Monday, LastPass stated that it is not asking customers to back up their vaults within any specific timeframe. The company explained that the emails are designed to create a false sense of urgency, a common social engineering tactic used in phishing campaigns.
Do not click the LastPass “create backup” link
Edward Kiledjian
@ekiledjian