The RegisterBusiness & Tech• 3 min read

$10K phishing kit claims it can plant rogue passkeys for persistent access to pwned accounts

Published 21 August 2026, 1:18pm

Seller's demos show a browser-in-the-middle attack adding credentials seconds after authentication

Read the full story at The Register

Havoc links to the original reporting. The full story stays with the publisher.

Was this worth reading?Sign in to vote

More in Business & Tech

The Register

The White House is apparently a popular residential proxy exit spot

How it got there is another matter entirely

Business & Tech Finextra

Finra fines Webull $4.2m for AML and best execution failures

Digital investing platform Webull has been fined $4.2 million by US regulators for failing to roll out "reasonably designed" programmes for anti-money laundering, identity theft prevention and best execution.

Business & Tech The Register

Get root on a musl Linux system by slamming it with an overly long password

Decade-old vulnerability in OpenSSH is now fixed, so get a-patchin'

Business & Tech