Hackers don't need an app to steal login credentials anymore - a PWA will do.
In recently spotted attacks, the crooks would send phishing emails to government and public sector organizations, usually ...