Author: Stephan Dorsey

Hackers brute-forced Dashlane 2FA, downloaded encrypted vaults

TL;DR Attackers brute-forced Dashlane’s 2FA system to register new devices on fewer than 20 accounts, downloading their encrypted password vaults. The vaults remain encrypted with master passwords Dashlane never stores, but users with weak passwords face offline cracking risk. Dashlane disclosed on Sunday that an external attacker launched a brute-force attack against its two-factor authentication […]