Malicious Browser Notifications: How Push Spam Delivers Scams and Malware
You visited a website once, clicked "Allow" on a popup you barely read, and now your desktop shows alerts like "Your PC is infected — click to clean" or "You have 3 new messages" even when your browser is closed. Those are not system warnings. They are web push notifications, and they have quietly become one of the most effective delivery routes for scams, fake antivirus, and malware. The tactic works because it borrows trust. A notification that appears in the corner of your screen looks like it came from your operating system, not from a random site you visited three months ago. Security vendors have tracked millions of these abusive notification domains, and the pattern is consistent: the permission is harvested through deception, then sold or reused to push whatever pays best that week. How the Permission Gets Stolen in the First Place Browser notifications are a legitimate feature. Gmail uses them. Your calendar uses them. The abuse comes from...