New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets

A new phishing toolkit called iAuthFlow V2 has been discovered, which can register a passkey controlled by an attacker. This allows the attacker to maintain access to a system even after the user's password has been changed and any active sessions have been revoked. The toolkit enables persistent access by leveraging the passkey, which remains active despite password resets. This capability makes iAuthFlow V2 a significant threat, as it can bypass common security measures. The use of passkeys in this way highlights a potential vulnerability in authentication systems.