On Wednesday, Mathias Karlsson of Detectify Labs said he had also managed to hack LastPass. Tavis Ormandy isn’t the only security researcher to take an interest in the password manager. The popular software is supposed to securely store all passwords set by users to access different sites and automatically fill in identification fields when needed. Every vulnerability in LastPass poses a great risk to the user. I will send a report to the editor as soon as possible”. On Tuesday, after analyzing the password manager, it sent the following tweet: “People really use this LastPass? I looked at the manager closely and could find a bunch of obvious critical issues. It was Google security researcher Tavis Ormandy who discovered the problem. Yesterday, LastPass said a fix was already available for Firefox users. For the hack to work, the user must first be directed to a malicious site that exploits the flaw in a LastPass add-on for the Firefox browser, and allows the hacker to take control of the management software. A Google security researcher has found a way to hijack the software remotely by exploiting a Firefox add-on. Even the LastPass password manager can be spoofed.

Lastpass password manager extension