Phishing New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets Researchers say iAuthFlow V2 can register an attacker-controlled passkey, enabling persistent access even after passwords are changed and active sessions revoked. Kevin TownsendAugust 21, 2026
Phishing New Bluekit Phishing Kit Features AI Assistant Still under development, Bluekit provides users with automated domain registration and an AI Assistant. Ionut ArghireMay 2, 2026
Phishing Tycoon 2FA Loses Phishing Kit Crown Amid Surge in Attacks Threat actors are reusing Tycoon 2FA tools across other phishing kits following the platform’s disruption. Ionut ArghireApril 18, 2026