Warning: Downloading this web app could infect your entire device with malware

Progressive Web Apps (PWA), a type of application delivered through a web browser, can be abused for phishing by creating authentic-looking, deceptively real data collection platforms, experts warn.

Researcher mr.d0x, a well-known figure in the cybersecurity community particularly known for creating and sharing tools and techniques useful for penetration testing, red teaming, and security research, has described the development of a new phishing toolkit that allows users to create PWAs that display corporate login forms and even have a fake address bar that displays the authentic URL, thus appearing more trustworthy.