Security researchers developed a new attack, which they named AutoSpill, to steal account credentials on Android during the autofill operation.