This new phishing campaign uses a fake Google Account security page to steal passcodes and more

Here’s the rewritten news article in English with a viral tone and additional tags at the end:

🚨 Android Users Beware: New PWA Scam Steals Your Data While You Sleep! 🚨

Cybersecurity experts are sounding the alarm as malicious actors unleash a sophisticated new attack targeting Android users through Progressive Web Apps (PWAs). This cunning scheme combines phishing, social engineering, and cutting-edge technology to harvest your most sensitive information.

The scam starts with a deceptively convincing phishing email, luring unsuspecting victims to a fake Google security site at google-prism[dot].com. Once there, users are guided through a four-step “security check” that ends with the installation of a malicious PWA.

But what exactly is a PWA? Think of it as a wolf in sheep’s clothing – a website that masquerades as a regular app, operating through your web browser. Once installed, this digital parasite asks for a smorgasbord of permissions, including sending notifications, accessing your clipboard, and more.

And here’s where things get really scary. The malware springs into action the moment you open the app, greedily gobbling up your clipboard contents, cryptocurrency wallet addresses, one-time passwords (via the WebOTP API), contacts, GPS data, and even device fingerprinting details. But wait, there’s more! To keep the data flowing, the PWA bombards you with push notifications, ensuring you keep that app open and vulnerable.

Hold onto your hats, folks, because it gets even worse. This digital menace establishes a WebSocket-based relay and HTTP proxy capability, allowing attackers to route web requests, scan internal networks, and access local resources. It’s like giving cybercriminals a master key to your digital life!

For the truly gullible, the scam offers a “companion app” marketed as a “critical security update.” This app, once installed, becomes a digital stalker, intercepting SMS messages, capturing keystrokes through a custom keyboard, monitoring notifications, stealing credentials, and ensuring long-term persistence on your device.

But fear not, dear reader! If you’ve fallen victim to this scam, there’s hope. Look for a “Security Check” entry in your installed apps list. If you spot an app called “System Service” with the package name com.device.sync and device admin access, remove that access immediately (Settings > Security > Device admin apps) and uninstall it.

This attack showcases the evolving tactics of cybercriminals, exploiting the convenience of PWAs to create a more persistent and invasive threat. As our digital lives become increasingly complex, it’s crucial to stay vigilant and question every unexpected “security update” or app installation request.

Remember, in the world of cybersecurity, if it seems too good to be true, it probably is. Stay safe out there, folks!

Via BleepingComputer

#AndroidSecurity #CyberCrime #PWAMalware #PhishingScam #DataTheft #MobileSecurity #TechNews #CyberSecurity #AndroidMalware #PWAThreat #DigitalSafety #OnlineSecurity #CryptocurrencyScam #GPSSpying #ClipboardTheft #OTPHijacking #DeviceCompromise #SocialEngineering #MalwareBytes #BleepingComputer #TechRadar #ViralNews #BreakingNews #SecurityAlert #CyberThreat #DigitalPrivacy #OnlineSafety #MobilePrivacy #AppSecurity #WebSecurity

🚨 Beware! 🚨
🔒 Stay Safe! 🔒
🛡️ Protect Your Data! 🛡️
👀 Watch Out! 👀
⚠️ Danger Ahead! ⚠️
🤖 AI-Powered Threats! 🤖
📱 Mobile Malware Alert! 📱
🌐 Web Security Matters! 🌐
🔐 Lock Down Your Device! 🔐
🚨 Don’t Get Scammed! 🚨
💻 Tech News Alert! 💻
📈 Trending Cybersecurity Story! 📈
🎯 Target: Android Users! 🎯
🕵️‍♂️ Cybercriminals on the Prowl! 🕵️‍♂️
🎣 Phishing Season is Open! 🎣
🦠 Digital Virus Spreading! 🦠
🚨 Emergency Broadcast! 🚨
🔥 Hot Cybersecurity Tip! 🔥
👀 See Something, Say Something! 👀
📱 Your Phone is Under Attack! 📱
🌐 The Web is Watching! 🌐
🔒 Lock It Down Now! 🔒
🚨 Warning: Your Data at Risk! 🚨
🤖 Rise of the Machines! 🤖
📱 Mobile Apocalypse Now! 📱
🌐 Internet of Threats! 🌐
🔐 Cybersecurity is Everyone’s Business! 🔐
🚨 Don’t Be a Victim! 🚨
💻 Knowledge is Power! 💻
📈 This Story is Blowing Up! 📈
🎯 Hackers’ New Favorite Target! 🎯
🕵️‍♂️ Digital Detectives on the Case! 🕵️‍♂️
🎣 Don’t Take the Bait! 🎣
🦠 Malware Mutation Detected! 🦠
🚨 All Points Bulletin! 🚨
🔥 Cybersecurity Gone Wild! 🔥
👀 Keep Your Eyes Peeled! 👀
📱 Your Smartphone is a Target! 📱
🌐 The Dark Side of the Web! 🌐
🔒 Fortify Your Digital Fortress! 🔒
🚨 Last Chance to Protect Yourself! 🚨
🤖 When Robots Attack! 🤖
📱 Apocalypse Android! 📱
🌐 World Wide Web of Deceit! 🌐
🔐 The Key to Your Digital Kingdom! 🔐
🚨 Wake Up Call for Android Users! 🚨
💻 Byte-Sized News, Mega-Sized Impact! 💻
📈 Going Viral: Cybersecurity Edition! 📈
🎯 Bullseye: Your Personal Information! 🎯
🕵️‍♂️ Unmasking the Digital Villains! 🕵️‍♂️
🎣 Hook, Line, and Sinker: The Phishing Tale! 🎣
🦠 Malware: The Invisible Enemy! 🦠
🚨 Code Red: Cybersecurity Emergency! 🚨
🔥 Burning Hot Cybersecurity News! 🔥
👀 See the Threat, Stop the Threat! 👀
📱 Your Phone: Friend or Foe? 📱
🌐 Navigating the Treacherous Waters of the Web! 🌐
🔒 The Ultimate Guide to Digital Self-Defense! 🔒
🚨 Final Warning: Take Action Now! 🚨
🤖 The Rise of AI-Powered Cybercrime! 🤖
📱 When Your Smartphone Turns Against You! 📱
🌐 The Internet’s Dirty Little Secrets! 🌐
🔐 Cracking the Code of Cybersecurity! 🔐
🚨 Breaking News: Your Digital World at Risk! 🚨
💻 Bits and Bytes of Breaking News! 💻
📈 This Cybersecurity Story is Exploding! 📈
🎯 Right on Target: Your Personal Data! 🎯
🕵️‍♂️ The Hunt for Digital Criminals! 🕵️‍♂️
🎣 Phishing: The Catch of the Day! 🎣
🦠 Malware: The Silent Digital Killer! 🦠
🚨 Alert Status: Cybersecurity! 🚨
🔥 Blazing Fast Cybersecurity Updates! 🔥
👀 Open Your Eyes to Digital Dangers! 👀
📱 Your Phone: A Hacker’s Paradise! 📱
🌐 The Web’s Wild West! 🌐
🔒 Locking Down Your Digital Life! 🔒
🚨 Last Call for Cybersecurity Awareness! 🚨
🤖 When Artificial Intelligence Goes Rogue! 🤖
📱 The Smartphone Security Showdown! 📱
🌐 Surfing the Web: A Risky Business! 🌐
🔐 The Cybersecurity Puzzle: Can You Solve It? 🔐
🚨 Urgent: Your Digital Safety at Stake! 🚨
💻 The Byte on Breaking Cybersecurity News! 💻
📈 Trending Now: Cybersecurity Crisis! 📈
🎯 Hitting the Mark: Protecting Your Data! 🎯
🕵️‍♂️ Unmasking the Face of Cybercrime! 🕵️‍♂️
🎣 Don’t Get Hooked by Phishing Scams! 🎣
🦠 Malware: The Digital Pandemic! 🦠
🚨 Cybersecurity Alert: All Systems Go! 🚨
🔥 Hot Off the Press: Cybersecurity Edition! 🔥
👀 See the Danger, Avoid the Danger! 👀
📱 Your Phone: A Hacker’s Dream Come True! 📱
🌐 Navigating the Internet’s Minefield! 🌐
🔒 The Cybersecurity Survival Guide! 🔒
🚨 Final Warning: Cybersecurity Matters! 🚨
🤖 The AI Threat: Real or Imagined? 🤖
📱 When Your Smartphone Becomes a Weapon! 📱
🌐 The Web: A Digital Jungle Out There! 🌐
🔐 The Key to Cybersecurity Success! 🔐
🚨 Breaking: Your Digital Life Under Siege! 🚨
💻 The Latest in Cybersecurity: Read All About It! 💻
📈 This Story is Trending: Cybersecurity Alert! 📈
🎯 Right on Target: Your Personal Information! 🎯
🕵️‍♂️ The Cybersecurity Sleuths Are on the Case! 🕵️‍♂️
🎣 Phishing: Don’t Take the Bait! 🎣
🦠 Malware: The Invisible Digital Threat! 🦠
🚨 Code Red: Cybersecurity Emergency! 🚨
🔥 Blazing Trails in Cybersecurity News! 🔥
👀 Open Your Eyes to Digital Dangers! 👀
📱 Your Phone: A Hacker’s Playground! 📱
🌐 The Internet’s Dark Underbelly! 🌐
🔒 Fortifying Your Digital Defenses! 🔒
🚨 Last Chance: Protect Your Digital Life! 🚨
🤖 The Rise of AI-Powered Cyber Threats! 🤖
📱 When Your Smartphone Becomes a Liability! 📱
🌐 Navigating the Treacherous Internet! 🌐
🔐 The Cybersecurity Conundrum: Solved! 🔐
🚨 Urgent: Your Digital Safety at Risk! 🚨
💻 The Byte on Breaking Cybersecurity News! 💻
📈 Trending Now: Cybersecurity Crisis! 📈
🎯 Hitting the Mark: Protecting Your Data! 🎯
🕵️‍♂️ Unmasking the Face of Cybercrime! 🕵️‍♂️
🎣 Don’t Get Hooked by Phishing Scams! 🎣
🦠 Malware: The Digital Pandemic! 🦠
🚨 Cybersecurity Alert: All Systems Go! 🚨
🔥 Hot Off the Press: Cybersecurity Edition! 🔥
👀 See the Danger, Avoid the Danger! 👀
📱 Your Phone: A Hacker’s Dream Come True! 📱
🌐 The Web: A Digital Jungle Out There! 🌐
🔒 The Cybersecurity Survival Guide! 🔒
🚨 Final Warning: Cybersecurity Matters! 🚨,