The United States Computer Emergency Readiness Team was a team under the Cybersecurity and Infrastructure Security Agency of the Department of Homeland Security. From Wikipedia
Researcher Marek Tóth demonstrated DOM-based attacks that hijack autofill UI to exfiltrate credentials, TOTP codes, and payment data.