Auto-fill Phishing with Chrome
Published in
1 min readJan 5, 2017
As demonstrated by anttiviljami on Github browser-autofill-phishing allows for Chrome to leak additional information that the user may not be aware they are submitting to the website.
Other browsers are also affected although Safari appears to be the most immune by explicitly stating what will be filled out on the page. Hopefully highlighting to the user that they are leaking more information than they expected.
The exploit works by generating the additional fields outside of the browser viewport.
Be careful out there!
