Theregister iconTheregisterAug 21, 2026

$10K phishing kit claims it can plant rogue passkeys for persistent access to pwned accounts

Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication

$10K phishing kit claims it can plant rogue passkeys for persistent access to pwned accounts

Share this story

Send the public story page.

Useful takeaways from this story.

Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app