Mozilla Firefox and Focus for iOS Passkey Phishing Vulnerability via FIDO Links

A vulnerability exists in Firefox for iOS versions prior to 142 and Focus for iOS versions prior to 142, allowing malicious pages to send FIDO links that could be used to hijack passkeys. An attacker within Bluetooth range could exploit this to log into a target account using the victim's passkey.

Impact

Exploitation of this vulnerability could lead to unauthorized access to accounts by misusing the victim's passkey.

Remediation

Users can update to Firefox for iOS 142 or Focus for iOS 142 to address this vulnerability.