Auto-fill Phishing with Chrome

Andy Gambles
Jan 5, 2017 · 1 min read
Image for post
Image for post
browser auto-fill phishing

As demonstrated by anttiviljami on Github browser-autofill-phishing allows for Chrome to leak additional information that the user may not be aware they are submitting to the website.

Other browsers are also affected although Safari appears to be the most immune by explicitly stating what will be filled out on the page. Hopefully highlighting to the user that they are leaking more information than they expected.

The exploit works by generating the additional fields outside of the browser viewport.

Be careful out there!

Servertastic

Stories from the world of servertastic.com

Welcome to a place where words matter. On Medium, smart voices and original ideas take center stage - with no ads in sight. Watch

Follow all the topics you care about, and we’ll deliver the best stories for you to your homepage and inbox. Explore

Get unlimited access to the best stories on Medium — and support writers while you’re at it. Just $5/month. Upgrade

Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store