Synthèse
iAuthFlow v2 phishing toolkit uses a phished Google session to enroll an attacker-controlled passkey that survives password resets.
iAuthFlow v2 phishing toolkit uses a phished Google session to enroll an attacker-controlled passkey that survives password resets.
Source originale
securityaffairs.com
New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets ↗
securityweek.com · 21 août