No users are reported to have been impacted by the flaw and there are no signs that the vulnerability has been exploited by any malicious actors. If it does not, uninstall and reinstall LastPass through their website. The results should say “Version: 4.33.0“.Click on the LastPass browser extension.How to check what version of LastPass you have installed: Users are encouraged to ensure they have version 4.33.0 of LastPass installed. The LastPass browser extension has been automatically updated. When the user clicked on the button, they agreed to disable their security protections! Now the hacker can freely access and corrupt the user’s files without them knowing a thing! Unfortunately, a hacker has hidden a link to the user’s security permissions in the download song button. The user clicks on the “download song” button thinking they will download the music file. What is clickjacking?Ĭlickjacking is when a hacker conceals hyperlinks within legitimate clickable content to manipulate the user into performing malicious actions.įor example, let’s pretend a user is trying to download a song from a website. To expose this information, users would need to have filled in a password using the LastPass browser extension, then visited a malicious website and clicked on that website several times. What happened?Ī security researcher from Google’s Project Zero discovered a flaw within LastPass’s browser extension for Chrome and Opera that could expose the last site credentials filled by LastPass. LastPass recently identified and resolved a security bug that left customer credentials vulnerable to hackers.

Reinstall lastpass browser extension