Submit Your Suggestion What is a Warrant Canary?Ī term for a regularly published statement that a service provider has not received legal process that it would be prohibited from saying it had received, such as a national security letter. It has been tagged with Closed-Source, since the company decided not to release the source code to the public. It has been audited, is available cross-platform, under active development, and it's easy to use. More details about our project funding.Įxample: NordPass ticks off most boxes of our criteria. Generally, our sponsors follow the same ideology and fulfill most criteria innately. If you need assistance securing your password keeper, please contact SensCy.Sponsorships: Entries tagged with can be exempted from the criteria. Make sure you only enter your credentials on a legitimate website or application and immediately implement Multi-factor Authentication on your Password Manager accounts. It is unclear if the phishing can bypass the MFA. Once the credentials are submitted on the phishing page, it redirects users to the legitimate Bitwarden login page. The domain used in the ad was ‘’ and, when clicked, redirected users to the site ‘.’ The page at ‘’ replicates the legitimate Bitwarden Web Vault login page. Last Tuesday, Bitwarden users began seeing a Google ad titled ‘Bitwarden – Password Manager’ in search results for “bitwarden password manager.” (See picture below) SensCy urges users to stay vigilant when entering logins and master passwords.

Threat actors have recently targeted password managers, including LastPass and Norton LifeLock, to access logins and other credentials.

Many users have found that Bitwarden password vaults were targeted in Google ads phishing attacks to steal Bitwarden users’ credentials, including master passwords necessary to access encrypted password vaults. In today’s Cyber Brief, SensCy analyzes a new phishing trend targeted at password managers, notably Bitwarden.

Bitwarden extension chrome