Misuse of Passkeys: Phishing Toolkit Aims to Bypass Password Reset
TL;DR
AI-generated
A new phishing toolkit, iAuthFlow v2, allows attackers to gain persistent access to compromised accounts by linking passkeys after a password reset. The toolkit, priced at over $10,000, reportedly works with services including Google, Microsoft, Apple, and LinkedIn.
Source: golem.de
Discussion
Log in to join the discussion.
No comments yet. Be the first!