TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

LastPass installs malware?

14 pointsby jaddisonabout 10 years ago
From the lastpass download page, I installed the contents of https:&#x2F;&#x2F; lastpass.com &#x2F; download &#x2F; cdn &#x2F; lpmacosx.zip (de-urlized, for public safety)<p>My browsers were all hi-jacked, links taken over - lots of &#x27;searchmadeeasy.com&#x27; linking (particularly on stackoverlow.com and viewing stackoverflow.com results in google searches) and http:&#x2F;&#x2F; macsecurity-alert .com (de-urlized again), which is pretty obviously a malware phishing type site.<p>I never get caught by these sorts of things, and only downloaded lastpass on the recommendation of colleagues. Only by uninstalling lastpass were the issues addressed.<p>Anyone else seeing this with recent installs of lastpass? Infuriating that what I thought was a respectable company&#x2F;product is desperate for cash to hijack browsers.<p>Edit: do tell me if I&#x27;m wrong on anything here, please!

7 comments

boblastpassabout 10 years ago
I can confidently say that this was not from the LastPass install -- we would never include malware (our reputation is based on trust built up over many years, this would shatter it).<p>The md5 of our download is 0290ce268f6e57b1ce26bb21748b12eb, it was last updated on Mar 4.<p>It most likely came from a different source.
评论 #9509732 未加载
hanumantmkabout 10 years ago
I&#x27;ve been using lastpass for years, and haven&#x27;t seen anything remotely similar.<p>Maybe their cdn got hijacked?
评论 #9508492 未加载
numberwhunabout 10 years ago
Instead of going to their download page, why not just install the extension from ${browser_name}&#x27;s extensions functionality? That way you&#x27;re not dealing with the links on the developer&#x27;s page.
评论 #9508524 未加载
jaddisonabout 10 years ago
OP here.<p>The only thing that I can come up with is that I happened across a malicious page that did a drive-by install of some malware that magically disappeared upon browser restart (which both the lastpass installer and uninstaller force in order to get their extensions registered).<p>At least, that&#x27;s what I&#x27;m hoping, or I&#x27;ve still got malware on my system!
rifungabout 10 years ago
I&#x27;ve been using it for the last few months; never seen anything like this.
w0undabout 10 years ago
I have been using it for the last couple of years now and have never had any sort of issue like you are describing. Maybe the site has been injected with something or your friends invite was malicious?
评论 #9509415 未加载
nabarazabout 10 years ago
Do you still have the original zip file that you downloaded? Could you check the MD5sum and post it here?
评论 #9509419 未加载