Servertastic
Published in

Servertastic

Auto-fill Phishing with Chrome

browser auto-fill phishing

As demonstrated by anttiviljami on Github browser-autofill-phishing allows for Chrome to leak additional information that the user may not be aware they are submitting to the website.

Other browsers are also affected although Safari appears to be the most immune by explicitly stating what will be filled out on the page. Hopefully highlighting to the user that they are leaking more information than they expected.

The exploit works by generating the additional fields outside of the browser viewport.

Be careful out there!

--

--

Stories from the world of servertastic.com

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store