LastPass has publicly stated that it has not been breached, following the discovery of a phishing campaign that used the company’s branding to send deceptive emails. The fraudulent messages, sent from addresses such as hello@lastpasspulse.blog or hello@lastpassgazette.blog, warned recipients that the service had been hacked and urged them to update their desktop app. The email’s link directed users to a phishing site hosted at lastpassdesktop.com or lastpassgazette.blog instead of an official LastPass page. The password‑manager firm warned that the tactic was a social‑engineering attempt to create urgency and mislead users.