3 ms·

What's the most common example of an alternative attack with autofill?

• kaoD 1y ago
  The password manager's autofill browser extension gets compromised.
  • EE84M3i 1y ago
    This used to happen with some frequency but I haven't heard of it happening in some time now.
  • eviks 1y ago
    Common? Which of the good pw managers' extensions have been compromised in the last year?
• deleted 1y ago
  [deleted]
• karel-3d 1y ago
  just recently there was a clickjacking attack that affected most popular password manager extensions. It tricked the managers into filling passwords to random pages, worked on almost all extensions and all pages.
  • eviks 1y ago
    Are you refering to this one https://marektoth.com/blog/dom-based-extension-clickjacking https://marektoth.com/blog/dom-based-extension-clickjacking? This doesn't seem to be "passwords on random pages", only "Personal Data + Credit Card,", passwords are domain-specific unless the website is hacked itself. > The attacker can only steal credentials for the vulnerable domain.
    • karel-3d 1y ago
      ok that's nice