This new phishing campaign uses a fake Google Account security page to steal passcodes and more

Wait 5 sec.

Hackers don't need an app to steal login credentials anymore - a PWA will do.