#8
BleepingComputer
general
March 02, 2026 at 20:23 UTC
Fake Google Security site uses PWA app to steal credentials, MFA codes
By Ionut Ilascu
AI Summary
A phishing campaign uses fake Google Account security pages to deploy Progressive Web Apps (PWAs) that steal one-time passcodes, harvest cryptocurrency wallet addresses, and proxy attacker traffic through victims' browsers. The attack abuses PWA technology to create persistent access while appearing as legitimate Google security applications.
Relevance score: 79.0/100
Sponsored
Protect Your Business
Expert cybersecurity solutions to safeguard your organization from evolving threats.
Get Protected →