Fake Google Security Site Deploys Malicious PWA to Steal User Data

A phishing campaign is utilizing a counterfeit Google Account security page to distribute a malicious Progressive Web App (PWA). This app is designed to steal one-time passcodes, cryptocurrency wallet addresses, and user location data by tricking victims into believing they are interacting with a legitimate Google service. The attack exploits social engineering tactics to install the malware through users' browsers.