Brutal.
Home computer compromised by Plex(!!) which drops in a keylogger. LastPass DevOps employee then signs into their corp AWS console from home. pwned.
If someone is running Plex, they're almost definitely torrenting all sorts of shady stuff onto that same machine.
tldr: A whole security company compromised because one employee wouldn't pay for Netflix.
https://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/
KeithMukai / Keith Mukai
npub1tv…77wn2
2023-03-01 18:56:37
Author Public Key
npub1tv8gmfhalwnxxquxjzeh6gtdsdz6vg7vx0s3rt7s7uuw6aujh32qn77wn2Published at
2023-03-01 18:56:37Event JSON
{
"id": "23d80a3b5a99219c7694ad03bb8020053235cdf63f074c22b935529d496e8b15",
"pubkey": "5b0e8da6fdfba663038690b37d216d8345a623cc33e111afd0f738ed7792bc54",
"created_at": 1677696997,
"kind": 1,
"tags": [],
"content": "Brutal.\n\nHome computer compromised by Plex(!!) which drops in a keylogger. LastPass DevOps employee then signs into their corp AWS console from home. pwned.\n\nIf someone is running Plex, they're almost definitely torrenting all sorts of shady stuff onto that same machine.\n\ntldr: A whole security company compromised because one employee wouldn't pay for Netflix.\n\nhttps://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/",
"sig": "ac61dbe837385c5bf8a9f3a78198ea0885f78216f2333fdf22a8261bad759d68386595cc36209de25533571234a1dea703705f51b6a8843e6a2dfaba1751eac2"
}