iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset

**iAuthFlow v2 phishing toolkit enables persistent account takeover by enrolling attacker-controlled passkeys after a successful phishing-based Google login, allowing adversaries to regain access even after victims change their passwords; the report details the browser-in-the-middle relay technique, automated passkey enrollment, demo timelines, potential use against other providers, and recommended containment and mitigation steps.**