Finnish web developer Viljami Kuosmanen has published a demo on GitHub that shows how an attacker could take advantage of browsers that support autofill profiles. The developer discovered that Chrome had UI elements in place when a username or password was filled in, even inside a hidden field, but these didn’t appear for the other fields. Chrome, Safari, Opera, Firefox, Edge, Vivaldi, and Firefox don’t support this feature, but Mozilla is currently working on it. Users can turn off the feature by unticking a checkbox.
Source: https://www.bleepingcomputer.com/news/security/browser-autofill-profiles-can-be-abused-for-phishing-attacks/