Seller demos show a browser in the middle attack adding credentials seconds after authentication A phishing kit for sale on Russian language cybercrime forums claims it can enroll attacker controlled passkeys on compromised accounts, providing persistent access after passwords are changed. Advertised at around $10,000 for the base package, with additional modules sold separately, iAuthFlow v2 aims to solve a common problem for attackers: being locked out after the victim detects the...
