A few days ago, Sean Cassidy of Praesidio released an application called LostPass that exploits phishing vulnerabilities in the LastPass password manager. See here: https://www.seancassidy.me/lostpass.html. Do not use a password manager to store anything important. You can do better than that.