PhishU released the Passkey Downgrade technique, which draws passkey prompts drawn by the page to look identical to the real one and automatically teaches users the difference without rollout.

We perform highly customized, targeted spear-phishing with analytics to test your defenses and track employee awareness progress. We also help identify weaknesses in Multi-Factor Authentication and anti-spam implementations. After getting caught (or before!), take our awareness training to know what to look for next time and improve the security posture of the organization. Have your own internal security team? Purchase our tool to assist with internal phishing campains and awareness training.