$10K phishing kit claims it can plant rogue passkeys for persistent access to pwned accounts
AI disclosure
Summary
Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication