[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![TheHackersNews Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::209811713.png) The Hacker News [@TheHackersNews](/creator/twitter/TheHackersNews) on x 926.4K followers
Created: 2025-07-21 06:15:14 UTC

🚨 Hackers are bypassing FIDO keys—without breaking them.

A new phishing trick fools users into scanning legit QR codes, handing attackers full access.

The worst part? It abuses a real cross-device sign-in feature.

How PoisonSeed pulls it off ↓

![](https://pbs.twimg.com/card_img/1947178382224936961/wPetVdKd?format=jpg&name=800x419)

XXXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1947178534125945191/c:line.svg)

**Related Topics**
[legit](/topic/legit)

[Post Link](https://x.com/TheHackersNews/status/1947178534125945191)