{"id":99750,"date":"2024-02-08T09:46:27","date_gmt":"2024-02-08T17:46:27","guid":{"rendered":"https:\/\/www.intego.com\/mac-security-blog\/?p=99750"},"modified":"2024-02-22T11:26:25","modified_gmt":"2024-02-22T19:26:25","slug":"apple-is-distributing-a-fake-lastpass-password-manager-in-the-app-store","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/apple-is-distributing-a-fake-lastpass-password-manager-in-the-app-store\/","title":{"rendered":"Apple distributed a fake LastPass Password Manager in the App Store"},"content":{"rendered":"

\"\"<\/p>\n

Apple recently allowed a fake LastPass Password Manager app into the App Store. As of the morning of February 8, Apple has not yet removed the app, even after LastPass itself blogged about it<\/a> on February 7.\u00a0Update:<\/strong> Several hours after Intego published this article, Apple finally removed the app from the App Store.<\/p>\n

It’s unclear when the fraudulent app first made it into the App Store; if downloaded onto a Mac, the modification dates within the binary suggest it was compiled on January 16. However, users began to notice the rogue app in the App Store on February 4. Two people posted warnings: “This is not the real LastPass” and “Probably a scam to steal passwords.”\u00a0 Another two reviewers posted similar warnings on February 6.<\/p>\n

All four reviewers gave the app 1 star out of 5. Oddly, Apple claims that the app has a “5.0 out of 5” rating with a total of 1 rating.<\/p>\n

Does a blatant copycat constitute a legitimate app in Apple’s eyes?<\/h3>\n

Keen-eyed observers will note that the app’s title is technically “LassPass Password Manager.”\u00a0 (That’s a double S in the middle of LassPass.) The fake app’s logo uses the same red-and-white color scheme, and features dots and a cursor. Technically, the app isn’t violating LastPass trademarks. But it’s evident that the developer was trying to make it look as close to the real LastPass as possible.<\/p>\n

The fake app shows up in search results for LastPass, if you scroll down far enough. But more concerningly, if you mistakenly type LassPass, Apple “helpfully” suggests the fraudulent app’s title to help you find it.<\/p>\n

“LassPass” is designed to run on iPhone and iPad. It’s also available in the Mac App Store and can run on Apple silicon-based Macs. And it’s even possible to run the app on Apple Vision Pro.<\/p>\n

The fraudulent app even offers in-app purchase subscriptions, including a “lifetime plan” for $49.99. Given that Apple takes a cut of in-app purchase revenue, Apple may have directly profited from distributing “LassPass”<\/strong> in its App Store.<\/p>\n

Apple has a major problem over-approving apps in sensitive categories<\/h3>\n

Given the highly sensitive information that people store in password managers\u2014the virtual keys to one’s digital kingdom\u2014Apple has a moral obligation to more carefully review this category of app in the App Store.<\/p>\n

Similarly, Apple has had an ongoing problem with approving financial loan apps that aren’t developed by legally licensed lenders. As we noted in our 2023 Apple malware roundup<\/a>, one independent researcher singlehandedly found and reported more than 200 fraudulent loan apps to Apple in 2023 alone. These apps may have plausibly garnered hundreds of thousands of cumulative downloads before Apple finally removed them.<\/p>\n

Unless Apple begins to face significant public pressure to improve its practices, it’s unlikely that Apple will change. We urge responsible mainstream and tech journalists<\/strong> to join with us in drawing attention to Apple’s consistently bad behavior.<\/p>\n

Reminder: we don’t recommend the real LastPass, either<\/h3>\n

Based on the real LastPass company’s track record, we don’t recommend using it as your password manager. You’re better off using iCloud Keychain<\/a>, ExpressVPN Keys<\/a>, or another commercial password manager<\/a> instead.<\/p>\n

Of course, many people still choose to use LastPass, and they should be able to safely download it without encountering unethical apps in the App Store.<\/p>\n

Presumably, given enough public pressure, Apple will eventually remove the “LassPass” app from its App Store.\u00a0This sort of thing has happened<\/a> before<\/a>\u2014several<\/a> times<\/a>. But it serves as a good reminder that users must be cautious about installing any app\u2014even if Apple has supposedly vetted it.<\/strong> [Update:<\/strong> Apple did remove the app late Thursday, after widespread tech news and social media attention.]\n

What should I do if I’ve downloaded “LassPass”?<\/h3>\n

If you installed “LassPass” by mistake, take note of any passwords you may have added to it. Although we haven’t yet confirmed whether the app has data exfiltration functionality, it’s possible that the developer may try to steal your passwords.<\/p>\n

So first and foremost: change any passwords you put into LassPass<\/strong>. Also change any similar passwords you may have used elsewhere. (Ideally, you shouldn’t reuse passwords across multiple services or use discernible password patterns.)<\/p>\n

Next, uninstall the app<\/strong>. On an iPhone, iPad, or iPod touch, press and hold on an empty area of the Home Screen until the apps start to wiggle, then tap the \u2296 (circled minus symbol) in the top-left corner of the app icon. (Learn more about uninstalling apps on an iPhone or iPad.<\/a>)<\/p>\n

If you installed the app on your Mac, you can drag it from the Applications folder to the Trash, as with other apps from the Mac App Store.<\/p>\n

This may, in a sense, be one of the first bits of malware (or potentially unwanted app, “PUA”) for Apple Vision Pro<\/strong>, since Apple says the app will also run on visionOS. To uninstall an app on Apple Vision Pro, pinch and hold on it, and then tap Remove App.<\/p>\n

If you purchased a subscription, follow Apple’s procedure to request a refund<\/a>.<\/a><\/p>\n

How can I keep my Mac safe from malware?<\/h3>\n

\"IntegoIntego VirusBarrier X9, included with Intego’s Mac Premium Bundle X9<\/a><\/strong>, is a powerful solution designed to protect against, detect, and eliminate Mac malware.<\/p>\n

If you believe your Mac may be infected, or to prevent future infections, it’s best to use antivirus software from a trusted Mac developer. VirusBarrier is award-winning antivirus software, designed by Mac security experts, that includes real-time protection<\/a>. It runs natively on both Intel- and Apple silicon-based Macs, and it’s compatible with Apple’s current Mac operating system, macOS Sonoma.<\/p>\n

One of VirusBarrier’s unique features is that it can scan for malicious files on an iPhone, iPad, or iPod touch<\/a> in user-accessible areas of the device. To get started, just attach your iOS or iPadOS device to your Mac via a USB cable and open VirusBarrier.<\/p>\n

If you use a Windows PC, Intego Antivirus for Windows<\/strong><\/a> can keep your computer protected from malware.<\/a><\/p>\n

How can I learn more?<\/h3>\n

We discussed “LassPass” on episode 331<\/a> of the Intego Mac Podcast:<\/p>\n