phishing? On the page of the hidden frame, leading to a page with http-authorization as auth-realm written the text "enter master password?" Although then it would be two fields for a username and password. So I think you need to restart FF in safe mode and check.