iAuthFlow v2 Phishing Kit Survives Password Resets
August 24, 2026
1 min read
8 views
cybersecurity
news
newsapi
iAuthFlow v2 phishing toolkit uses a phished Google session to enroll an attacker-controlled passkey that survives password resets. Abnormal Security researchers analyzed the kit, sold on a Russian-language cybercrime forum.
Was this article helpful?
0 found this helpful