A new phishing campaign is targeting LastPass and Bitwarden users with fake security alerts designed to compromise their data and devices.

LastPass is warning users about an ongoing phishing campaign that is using fake security notices to direct them to fraudulent websites.

LastPass users are being warned not to respond to a security alert email that looks like it comes from the password manager but is part of a credentials-stealing attack.