Crypto thief steals $4.4M in a day as toll rises from LastPass breach