$10K phishing kit claims it can plant rogue passkeys for persistent access to pwned accounts from www.theregister.com - Articles on 2026-08-21 12:18 (#77VCG) Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication