LastPass, a popular password manager, found itself targeted in a social engineering scheme involving fake reviews on the Chrome Web Store. The reviews included a phony support number, which led unsuspecting users to scammers posing as tech support. This example highlights how similar tactics could deceive users across a range of tech platforms. Here’s what to know and how to avoid becoming a victim of these sophisticated scams.
The Scam in Detail
In this specific attack, threat actors left fake reviews for LastPass on the Chrome Web Store, each containing a supposed customer service number. When users called, they were met by fraudsters acting as support agents, asking detailed questions about the user’s device and setup. Ultimately, they directed users to a fraudulent website where they could attempt to capture sensitive data.
These scammers recently modified their approach, adding emojis in the reviews to obscure the fake number. While the number itself changes, the fraudulent website remains the same, revealing the scammers’ efforts to evade detection and prolong the campaign.
Staying Safe in Any Tech Environment
These strategies could be used against any company that offers support services. Here are some general steps to protect yourself from scams like these:
- Trust Only Official Support Channels: Always reach out directly to support through a company’s verified website. Avoid relying on reviews or social media posts, which may be manipulated.
- Stay Cautious: Scammers often simulate urgency to prompt fast reactions. Avoid sharing passwords or sensitive information with anyone claiming to be support.
- Report Suspicious Activity: If you encounter suspicious information or interactions, report it.
- Stay Updated on Scams: Phishing tactics evolve, so staying informed about potential threats can help you avoid similar traps.
While LastPass users are the focus here, this kind of scam could impact any app or tech service with a support function. By keeping an eye out for suspicious activity and being cautious about where you seek help, you can protect yourself across multiple platforms.
