[rwth-security] New phishing toolkit uses PWAs to steal login credentials