IPHONE owners have been urged to check their devices for a fake clone app that attempts to the steal passwords for all their accounts.
Apple has removed the rogue app from its App Store, however, it may still be installed on people’s handsets.
2
The app is a copy cat of LastPass, a platform that keeps passwords safe inside an encrypted vault for both consumers and businesses.
The fake app’s name is ‘LassPass’ instead of ‘LastPass’ – and it is rated five-stars on Apple’s App Store, Bleeping Computer first reported.
However, upon closer inspection, there is only one five-star rating, while four other reviews warn about it being a copycat.
Like many phishing scams, the rogue app has tried to lure iPhone users into downloading it with an easy-to-miss spelling mistake.
It has also provided a fake five-star review to give it the appearance of legitimacy.
Meanwhile, the real app has over 52 thousand reviews.
If users punch in their passwords into the fake app they risk compromising their accounts.
The same developer has another app on the App Store that seems legitimate, so Bleeping Computer suggests their account may have been hijacked by malicious actors.
Most read in Phones & Gadgets
“We have included the URL for the fraudulent app as well as the link to our legitimate app so that customers can verify they are downloading the correct LastPass application for themselves until the fraudulent app is taken down,” LastPass warned in a blog post, prior to the app’s removal from the App Store.
“Rest assured, LastPass is actively working to get this application taken down as soon as possible and will continue to monitor for fraudulent clones of our applications and/or infringements upon our intellectual property.”
When Apple becomes aware of an app that violates its guidelines, it typically acts quickly to remove it from the App Store and ban the developer.
If you have installed the fake LastPass app, you should immediately remove it and change your password at lastpass.com.
It is then advised to perform the arduous task of resetting all passwords stored in your LastPass vault to be safe.
The Sun has contacted Apple for comment.
Three ways to spot a phishing app
There are three simple ways to spot a fake app on the iOS or Google Play store.
- Spelling mistakes
- Fake reviews
- Dodgy developer
If the app name and description is riddled with spelling mistakes – it’s likely a fake app and you must not install it.
Always check the reviews, too.
Often there are other people warning that an app is fake.
If there are barely any reviews, few positive ones, or reviews that look suspicious – then steer clear.
Then look up the developer and see whether they have any other apps that are popular.
If the developer only has one or two apps that have few reviews and lots of spelling mistakes – avoid, avoid, avoid.
