Fake LastPass Authenticator Can Kill Your Antivirus. Take This Action
If you searched for “LastPass Authenticator download” and landed on a shiny GitHub page with LastPass branding and fake “VirusTotal Approved” badges, do not run that ZIP. Researchers from LastPass’s TIME team and Delphos Labs say those fake repos delivered a Windows installer that first kills antivirus from kernel mode, then runs an information stealer LastPass tracks as Rapuncel. The joint report landed mid-September 2026 (BleepingComputer covered it Sept 18; […]
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.