Threat actors started to use progressive web applications to impersonate banking apps and steal credentials from Android and iOS users - Using this type of apps in phishing campaigns allows evading detection, bypass app installation restrictions
Cybersecurity company ESET reports that it is currently tracking two distinct campaigns relying on this technique
