Markuta personal blog

Cracking encrypted LastPass vaults

by Naz Markuta markuta.com published 2022-12-235 min read

The recent (2022) compromise of Lastpass included email addresses, home addresses, names, and encrypted customer vaults. In this post I will demonstrate how attackers may leverage tools like Hashcat to crack an encrypted vault with a weak password.

Points

181

HN comments

110

Submissions

1

Cited by

0 commenters

Security & PrivacyDatabases & Data2022

Related posts from the same era

Apple's plan to “think different” about encryption opens a backdoor to your life

EFF Deeplinks20212,260 points824 commentscited by 11 details

Someone is pretending to be me

Connor Tumbleson20222,244 points383 commentscited by 3 details

Whistleblower: Ubiquiti Breach “Catastrophic”

Krebs on Security20211,944 points785 commentscited by 9 details

IoT hacking and rickrolling my high school district

WhiteHoodHacker20211,912 points383 comments details

Exploiting vulnerabilities in Cellebrite UFED and Physical Analyzer

Signal Blog20211,897 points332 commentscited by 21 details

In 2024, please switch to Firefox

Roy Tanck20231,776 points810 comments details