Abnormal AI uncovers new phishing toolkit enabling persistent access after password resets
iAuthFlow v2 uses browser-in-the-middle architecture to enroll attacker-controlled passkeys. These survive resets, requiring defenders to investigate unauthorized authentication methods.