LastPass warns of a phishing campaign using lookalike domains and a fake DocuSign page to trick users into downloading dangerous software.