LastPass Site Password-Stealing Clickjacking Vulnerability

Published

2015-07-01 00:00

Collected

2026-07-08 08:47

---
id: 4274
title: "LastPass Site Password-Stealing Clickjacking Vulnerability"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/lastpass-site-password-stealing-clickjacking-advisory"
published_at: "2015-07-01T00:00:00Z"
tags: ["vulnerability", "advisory", "browser-extension", "password-manager", "clickjacking", "lastpass"]
phying_url: "https://phying.com/item/4274"
lang: en
---

# LastPass Site Password-Stealing Clickjacking Vulnerability

## Summary

A Bishop Fox advisory on LastPass clickjacking fixed in 3.9.2: deceptive overlays on sites without X-Frame-Options tricked users into copying saved site passwords out of the autofill menu.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2015-07-01T00:00:00Z
- **Original:** https://bishopfox.com/blog/lastpass-site-password-stealing-clickjacking-advisory
- **Phying News:** https://phying.com/item/4274