Your password manager may be inadvertently spilling your credentials, warn IIITH researchers

Are you one of those who relies on password managers (PMs) for creating and helping remember passwords? Then beware, especially if you use PMs on your mobile devices. A team of researchers from Indian Institute of Information Technology at Hyderabad (IIITH) has found a serious vulnerability in the autofill function of Android-based apps as it accidentally leaks login credentials to apps hosting the web pages, exposing the user to potential malicious attacks.