Phishing With Chromium's Application Mode

In the blog post mr.d0x shows how Chromium’s application mode allows us to easily create realistic desktop phishing applications. The Chromium Application Mode launches a single webpage like a desktop application in a new window and the address bar is hidden. Based on these options it’s possible to impersonate Microsoft Teams or Microsoft sign-in. BleepingComputer notes that a Windows shortcut launching the preinstalled Edge with the --app flag is enough for delivery, and Google replied that the feature “was deprecated before this research was published.”