LastPass installs malware?

#1

Post by jaddison » Thu, May 07, 2015, 9:19 PM UTC

From the lastpass download page, I installed the contents of https:// lastpass.com / download / cdn / lpmacosx.zip (de-urlized, for public safety)

My browsers were all hi-jacked, links taken over - lots of 'searchmadeeasy.com' linking (particularly on stackoverlow.com and viewing stackoverflow.com results in google searches) and http:// macsecurity-alert .com (de-urlized again), which is pretty obviously a malware phishing type site.

I never get caught by these sorts of things, and only downloaded lastpass on the recommendation of colleagues. Only by uninstalling lastpass were the issues addressed.

Anyone else seeing this with recent installs of lastpass? Infuriating that what I thought was a respectable company/product is desperate for cash to hijack browsers.

Edit: do tell me if I'm wrong on anything here, please!

Re: LastPass installs malware?

#2

Post by hanumantmk » Thu, May 07, 2015, 9:30 PM UTC

I've been using lastpass for years, and haven't seen anything remotely similar.

Maybe their cdn got hijacked?

Re: LastPass installs malware?

#3

Post by jaddison » Thu, May 07, 2015, 9:40 PM UTC

hanumantmk wrote: post #2

I've been using lastpass for years, and haven't seen anything remotely similar. Maybe their cdn got hijacked?

I have no idea - I've never used them before. I imagine if you've already got it installed, it's not an issue for you.

I don't think their product is affected, just what gets installed is .

Re: LastPass installs malware?

#4

Post by numberwhun » Thu, May 07, 2015, 9:42 PM UTC

Instead of going to their download page, why not just install the extension from ${browser_name}'s extensions functionality? That way you're not dealing with the links on the developer's page.

Re: LastPass installs malware?

#5

Post by hanumantmk » Thu, May 07, 2015, 9:43 PM UTC

jaddison wrote: post #3

hanumantmk wrote: post #2

I've been using lastpass for years, and haven't seen anything remotely similar. Maybe their cdn got hijacked?

I have no idea - I've never used them before. I imagine if you've already got it installed, it's not an issue for you. I don't think their product is affected, just what gets installed is .

Do you mind posting the sha256sum for the zip file you downloaded? Then when someone from lastpass comes along they could at least compare it with their upstream.

I just downloaded:

0778d4528381917a8beaebfa3c033cc81157439fae01c082e8e7f33b51e37340 lpmacosx.zip

Re: LastPass installs malware?

#6

Post by jaddison » Thu, May 07, 2015, 9:44 PM UTC

numberwhun wrote: post #4

Instead of going to their download page, why not just install the extension from ${browser_name}'s extensions functionality? That way you're not dealing with the links on the developer's page.

Probably wiser. However, I got looped into their on-site download funnel through a legit invite from a colleague.

Re: LastPass installs malware?

#7

Post by jaddison » Thu, May 07, 2015, 9:49 PM UTC

hanumantmk wrote: post #5

jaddison wrote: post #3

Earlier quoted context omitted.

I have no idea - I've never used them before. I imagine if you've already got it installed, it's not an issue for you. I don't think their product is affected, just what gets installed is .

Do you mind posting the sha256sum for the zip file you downloaded? Then when someone from lastpass comes along they could at least compare it with their upstream. I just downloaded: 0778d4528381917a8beaebfa3c033cc81157439fae01c082e8e7f33b51e37340 lpmacosx.zip

Looks the same for me.

Re: LastPass installs malware?

#8

Post by numberwhun » Thu, May 07, 2015, 10:08 PM UTC

jaddison wrote: post #6

numberwhun wrote: post #4

Instead of going to their download page, why not just install the extension from ${browser_name}'s extensions functionality? That way you're not dealing with the links on the developer's page.

Probably wiser. However, I got looped into their on-site download funnel through a legit invite from a colleague.

Bah, no need for an invite when its free to use. :) But I see how you got there.

Re: LastPass installs malware?

#9

Post by rifung » Thu, May 07, 2015, 11:34 PM UTC

I've been using it for the last few months; never seen anything like this.

Re: LastPass installs malware?

#10

Post by sprkyco » Thu, May 07, 2015, 11:37 PM UTC

hanumantmk wrote: post #5

jaddison wrote: post #3

Earlier quoted context omitted.

I have no idea - I've never used them before. I imagine if you've already got it installed, it's not an issue for you. I don't think their product is affected, just what gets installed is .

Do you mind posting the sha256sum for the zip file you downloaded? Then when someone from lastpass comes along they could at least compare it with their upstream. I just downloaded: 0778d4528381917a8beaebfa3c033cc81157439fae01c082e8e7f33b51e37340 lpmacosx.zip

+1