Security NewsHighIncidentphishing
Fake Google Security site uses PWA app to steal credentials, MFA codes
UnknownMar 2, 2026(19 days ago)
A phishing campaign uses a fake Google security page to steal credentials, MFA codes, and cryptocurrency wallet addresses.
A phishing campaign is using a fake Google Account security page to deliver a web-based app capable of stealing one-time passcodes, harvesting cryptocurrency wallet addresses, and proxying attacker traffic through victims' browsers. [...]
Potentially Affected Vendors
Google Cloud Platform
Vendors are matched automatically based on AI analysis. Verify with official sources.