2

I was looking at signing up for an online account at a reputable web site (Vanguard) when I noticed something suspicious. When the site prompted me with a form to enter my name, I noticed--as usual--multiple variations of my name with previous addresses that I've had from Chrome autofill. But in addition to this I noticed the name of a friend I knew in college years ago. It included his first and last name with the zip code he currently lives in. This person has never had physical access to this computer, and I am signed in using a recently created google account that he has no knowledge of. Most interesting is that the autofill includes his current zip code that wasn't associated to him when we were in the same city.

Has my computer been compromised? What has happened here? While this is the first time that I've tried to sign up to this site, I've never seen his name show up in autofill applications before. Can I trust any of my accounts going forward?

  • 1
    What addons have you installed? – BlueWizard Feb 24 '18 at 6:06
  • What function provided the autofill? Chrome itself? If so, then check the Chrome autofill settings (chrome://settings/autofill). Have you confirmed if Chrome autofill is tied to the account or the local install or the Google account? Before assuming some kind of complex attack, confirm that the mundane answer is not the case. Have you entered your friend's address in some online form? – schroeder Feb 24 '18 at 8:42
  • The only extensions I have is for Google Docs. The function that provided the autofill was, I believe, the local install of Chrome. The autofill does not appear to be tied to any specific google login. I do see the address show up in the autofill data under chrome://settings/autofill. I have never personally entered this person's information into an online form before. Thanks, and I hope this clarifies things. – Shady fortune-teller Feb 24 '18 at 15:25
  • Have you tried using autofill on other sites again or later? – Tom K. Feb 24 '18 at 19:54
  • Tom K - I've tried on a few separate sites and the autofill oddity remains. – Shady fortune-teller Feb 25 '18 at 3:19
0

It's very unlikely to indicate any security breach; I can't think of any attack that would involve or result in adding content to browser autofill. It would be unusual for someone to fill in their real name in that scenario as well.

As for how it could have happened, here's what I'd suspect. Autofill remembers, for a given field name, everything you type into that field. It can unintentionally have separate entries "FirstName" and "First name", depending on how the fields were called in the page's code. They're not split by purpose, on the other hand, so if you enter someone's name in a people search form, autofill could later suggest it as yours.

Using a different google account won't necessarily reset autofill, as the data is stored on the local PC. Browser data can even travel between two PCs via a common accounts, then between accounts on the new PC, so one can occasionally dredge up really old pieces.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.