New Phishing Technique Exploits Progressive Web Apps for Credible Attacks

Researcher Mr.d0x disclosed a proof-of-concept phishing technique that leverages Progressive Web Apps (PWAs) to mimic legitimate applications, trick users into installing them, and then redirect victims to credential-harvesting phishing pages; the report includes a technical breakdown and GitHub proof-of-concept and urges user caution and developer hardening to mitigate the risk.