LASTPASS WARNS OF FAKE SUPPORT CENTERS TRYING TO STEAL CUSTOMER DATA

Summary from the TLDR InfoSec newsletter

There is a new phishing campaign that targets users by posting reviews with a fake customer support number. When users call the number, a fake customer support agent instructs them to enter a code on a website that installs the ConnectWise SmartConnect software. The customer support agent then asks questions and attempts to troubleshoot the issue while an accomplice uses the SmartConnect software to steal data or install other malware. The same customer support number has been seen in attacks on Netflix, Amazon, iCloud, and others.