Apple somehow let a duplicate LastPass app be published on App Store
We all know that Apple is very good when it comes to security and it has a gated wall for its products which means that it does not allow any app or software to easily pass their systems without proper scrutiny. However, Apple inadvertently approved an application masquerading as the popular passwor

We all know that Apple is very good when it comes to security and it has a gated wall for its products which means that it does not allow any app or software to easily pass their systems without proper scrutiny. However, Apple inadvertently approved an application masquerading as the popular password management tool LastPass for distribution on its App Store. The counterfeit app, which closely resembled the authentic LastPass in appearance and functionality, managed to bypass Apple’s stringent app review process, sparking a debate on the efficacy of the tech giant’s security measures.
The fake LastPass app was discovered by cybersecurity experts who immediately flagged the issue to Apple and the genuine LastPass team. Following the alert, Apple swiftly removed the app from its App Store, preventing further downloads. However, questions remain about how many users may have downloaded the imposter app before its removal and what potential data breaches could have occurred as a result.
Apple’s App Store has long been touted for its security and rigorous app review process, designed to protect users from malware and phishing attempts. This incident, however, highlights a rare but significant lapse in Apple’s vetting system, underlining the challenges even tech giants face in the constantly evolving landscape of cybersecurity threats.
The counterfeit LastPass app reportedly asked users to input their account credentials, posing a significant risk of identity theft and unauthorized access to sensitive information stored in their legitimate LastPass vaults. The breach of trust has prompted Apple to reassess its review procedures and implement additional checks to prevent similar incidents in the future.
In response to the incident, LastPass issued a statement urging users to exercise caution and download apps only from trusted sources. The company also provided guidance on how to identify the authentic LastPass app, including checking the developer’s name and reading reviews carefully.
Cybersecurity experts have weighed in on the situation, emphasizing the importance of digital vigilance. They recommend that users enable two-factor authentication (2FA) whenever possible and regularly monitor their accounts for any unusual activity. However, Apple will have to do an internal review on how exactly did this app pass their security checks.
More in Business
View allThe First 90 Days After Buying a Website: Change vs. Silence
A strategic guide for online business buyers on what to alter and what to preserve during the critical first three months of ownership.
How to Build a Durable and Sellable Web Asset
Learn how to design, operate, and document online businesses that command high multiples upon exit.
The Shift Toward Specialized Digital Assets
Analysis of why buyers and sellers are pivoting away from broad content sites toward specialized micro-SaaS and community assets.