Malware persists in email via Google passkeys

iAuthFlow v2, sold on Russian forums for over $10,000, lets attackers keep access to email accounts after password resets. The tool phishes logins and creates attacker-controlled passkeys. Defenses include auditing passkeys, OAuth tokens, mail rules, and removing rogue methods.