This simple phishing attack can steal your browser autofill data

Some browsers will turn over a user's autofill information -- even when the website doesn't ask for it.