Phishing Attacks against Password Manager Browser Extensions
No ratings
Presented at USENIX Security 2025 by
We study a phishing attack against password manager browser extensions. Browser extension UIs are mostly displayed on top of the web browser's viewport and, thus, hard to distinguish from website content. This enables an attacker to phish master passwords by imitating a locked password manager on a website they control.