Hackers don't need an app to steal login credentials anymore - a PWA will do.
Hackers found a new legitimate tool to abuse, and this time it's Google Tasks.