Fake Google Security site uses PWA app to steal credentials, MFA codes
From BleepingComputer to All on Mon Mar 2 16:48:08 2026
A phishing campaign is using a fake Google Account security page to deliver a web-based app capable of stealing one-time passcodes, harvesting cryptocurrency wallet addresses, and proxying attacker traffic through victims' browsers. [...]