If you still use LastPass and get an email pretending to be from one of their employees about "unauthorized account activity", just delete it.

The link in the email goes to a fake website where it asks you to log in....and you guessed it...they steal all your LastPass account info and all your stored passwords...