Beware of Browser Autofill and Password Managers - They Can Leak Your Personal Data

Advertisement
By Shekhar Thakran | Updated: 11 January 2017 19:12 IST
Highlights
  • Firefox is currently secure against this attack
  • Information for hidden boxes can be retrieved from autofill system
  • Chrome has the option switched on by default
Beware of Browser Autofill and Password Managers - They Can Leak Your Personal Data

We all like to use the autofill and built-in password manager features offered by Internet browsers as well as some third-party password managers in order to save time and avoid the trouble of remembering dozens of credentials. However, a new phishing attack might make you think twice before using the feature again. The phishing attack, discovered by a Finnish Web developer and hacker, tricks browsers as well as password managers into giving away users' credentials using a fairly simple trick.

Finnish Web developer and hacker Viljami Kuosmanen has found that Google's Chrome, Apple's Safari, as well as Opera, and password manager app LastPass, can all be tricked into leaking a user's personal information through their profile-based autofill systems, reports The Guardian. Kuosmanen discovered that whenever a user tries to fill up a form on the webpage, the autofill systems fill up the boxes even if they are not visible on the page.

 

This is why I don't like autofill in web forms. #phishing #security #infosec pic.twitter.com/mVIZD2RpJ3

— Viljami Kuosmanen ⭐ (@anttiviljami) January 4, 2017

 

This effectively means that while filling up the forms, the autofill system can potentially give away users' sensitive information if they confirm the autofill - even if only for a few visible fields. Chrome browser's autofill option is switched on by default and stores information such as email addresses, phone numbers, credit card information etc., as pointed out in the report.

Advertisement

Interestingly, Kuosmanen has also made a website to demonstrate how the process works. The webpage asks users to write their name and email address and has the boxes for mobile number and address hidden from plain site - the browser then proceeds to autofill this additional information without knowledge of the user.

Advertisement

As Firefox browser autofills each field individually, it is protected against this kind of an attack but the company is apparently working on a multi-field autofill system as well.

In order to ensure protection against such a phishing attack, users are advised to switch off the features from their browser

 

For the latest tech news and reviews, follow Gadgets 360 on X, Facebook, WhatsApp, Threads and Google News. For the latest videos on gadgets and tech, subscribe to our YouTube channel. If you want to know everything about top influencers, follow our in-house Who'sThat360 on Instagram and YouTube.

Advertisement
Popular Mobile Brands
  1. Amazon Prime Day Sale: Samsung Galaxy S24 Ultra Discount Revealed
  2. Amazon Prime Day 2025 Sale: iPhone 15 Discounted Price Revealed
  3. Samsung Galaxy S26 Ultra Leak Suggests 16GB RAM, Camera Upgrades, More
  4. Honor X9c 5G With 6,600mAh Battery Launched in India: Price, Features
  5. Realme 15 Pro 5G Leaked Render Shows Design Ahead of India Launch
  6. Xiaomi Compact Power Bank 20,000mAh Launched in India: Price, Features
  7. Lumio Arc 5, Arc 7 Projectors Launched in India: Price and Specifications
  8. Here's How Much the Vivo X Fold 5 and Vivo X200 FE Might Cost in India
  9. Lava Blaze AMOLED 5G Listed Online; Specifications Revealed
  10. UIDAI Updates Aadhaar Regulations: How to Update Aadhaar Card Online
  1. Realme 15 Pro 5G Leaked Render Shows Design Ahead of India Launch
  2. Samsung Smart Monitor M9 With QD-OLED Display Launched in India Alongside Refreshed M8, M7 Models
  3. Samsung Galaxy S26 Ultra Said to Get 16GB RAM, Improved Telephoto Lens, More
  4. Xiaomi Compact Power Bank 20,000mAh Launched in India With Built-In Cable: Price, Features
  5. Forza Motorsport Team 'No More', Romero Games 'Completely Closed' Following Microsoft Cuts
  6. Honor X70 Tipped to Launch With an 8,300mAh Battery, Snapdragon 6 Gen 4 SoC
  7. iPhone 15 to Get a Discount During Amazon Prime Day 2025 Sale: Price Revealed
  8. Realme 15 Series to Feature AI Edit Genie, a Voice-Enabled Photo Editing Tool
  9. Amazon India Is Bringing Rufus AI Assistant to Desktop, to Help Users During Prime Day Sale 2025
  10. Amazon Prime Day Sale 2025: Samsung Galaxy S24 Ultra to Be Available Under Rs. 80,000
Gadgets 360 is available in
Download Our Apps
Available in Hindi
© Copyright Red Pixels Ventures Limited 2025. All rights reserved.