ESET detected a new phishing technique using progressive web applications (PWAs) as part of a large-scale mobile financial scam