Imposter app LassPass posing as the popular password manager LastPass has been removed from the App Store one day after the creators of the original app issued a warning against it.
Apple prides itself on keeping the App Store safe by performing numerous safety checks before approving an app. It does seem to have a higher bar for security than its immediate competitor. That doesn’t mean it’s doing a perfect job of keeping the App Store safe, as the latest incident shows.
What makes the oversight feel particularly worrisome, though, is that LastPass is a service people use to store logins and passwords for various platforms. A fake copycat app designed to trick people into revealing their master password could give the bad actors behind it access to every or most apps a person uses.
The app in question, LassPass, had a name resembling the original app and copied LastPass’s branding and interface.
There were some telltale signs that it was a fake that many users quickly noticed, such as misspellings and a different publisher. It also had only one rating, whereas the legitimate app has more than 52 thousand. All of the reviews for it also noted that it was a deceptive app.
LastPass created a blog post on February 7 to warn its users against the app, which was removed from the App Store on February 8. According to the analytics platform Appfigures, the app has been on the platform since January 21. TechCrunch reports.
It’s not known how many people fell for the app, but it can be assumed that it failed to attract many downloads, as it never made it to any of Apple’s Top Charts.
If you have LassPass on your iPhone, not only should you delete it, but also change your LastPass password.