DDeepSeaX·Mar 3Fake Google Security Alert Installs PWA That Steals MFA CodesA phishing campaign uses google-prism.com to install a fake Google security PWA that steals MFA codes via WebOTP API, exfiltrates GPS and contacts, and acts as a browser RAT.4 min read·deepseax.hashnode.dev