To prevent further phishing attacks and add an extra layer when typing in a master password for the auto complete logins feature, users should have the option to add a small *.jpg or *png image to their "Enter Master Password" box or something similar so they know not to type in their master password when entering a website asking for their master password if it isn't colored with their chosen background.
I have encountered this look-alike popup twice now. It would be nice for users to know if the request is authentic or not. I believe this would be an easy addition and useful as well.