Scammers abuse browser push permissions for scareware and fraud
Original title: Why scammers want you to allow push notifications
HUMAN Security saw about 240 million Pushpaganda ad bid requests in one peak week; the permission itself does not install malware.
Malwarebytes and HUMAN Security describe campaigns that trick visitors into allowing browser notifications, then send scareware, fake financial alerts, and family-impersonation messages after they leave. Malwarebytes traced clean scans to quiz sites that hid an “Allow” demand behind the browser prompt. HUMAN’s Pushpaganda used sensational, often AI-looking articles, including in Google Discover, and researchers could not tell whether placement was paid or search-driven.
Unconfirmed: Researchers could not establish whether Google Discover placements were paid promotion or search optimization.
- Malwarebytes published its quiz-site findings on March 9; HUMAN published Pushpaganda on April 14.
- Alerts included fake arrest warrants, false money warnings, and missed calls from “Mom.”
- The 240 million figure counts advertising bid requests, not unique victims or infections.
- Chrome on Android can unsubscribe from a notification without opening its link.
Impact: Repeated scam and scareware messages after a site visit
- 1.Treat “Allow notifications to continue” on quizzes or unfamiliar sites as a red flag.
- 2.Unsubscribe in Chrome on Android, or block the site under notification settings.
- 3.Do not use a link inside a suspicious notification to manage its permission.
- ATT&CK
- T1036 Masquerading
- Vendors
- Products
- Chrome
- Organizations
- MalwarebytesHUMAN Security
From the original article
4 min read at malwarebytes.comBrowser push notifications are a common nuisance, and they can make people think their device is infected with adware.
By @MetallicaMVP · malwarebytes.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.