What threat models and currently known attacks against online and/or offline Password Managers exist, that do not base on CSRF, XSS or autofill behaviour?
I have found two publications from usenix.org here and here that show detailed explanation for the cases mentioned above.
I would appreciate answers, that are based on current research on commonly used Password Managers (regardless of the Operating System). The threat model or attack may use CSRF, XSS or autofill, but should not be the main attack vector or use an entirely different approach of these, than in the linked papers.
I am open for all suggestions including self-promotion of research. This question is not intended to let you do the search for publications, it is just for answers in case you already know of such attacks and would like to share these information.
