AI clickbait can turn your notifications into a scam feed, a Malwarebytes report published on 15 April 2026, detailing how Pushpaganda uses AI-generated content to surface in feeds like Google Discover or a new Chrome tab. The operation combines ad fraud, social engineering and scareware to push seemingly ordinary stories about money, tech or politics, with attackers steering victims to an attacker‑controlled site that prompts for notifications.
A single tap grants permission for alerts to appear on Android or desktop, where these messages clutter the notification tray and can bypass typical ad‑blocking. The ensuing stream of alarming, out‑of‑context notices often leads users to further pages that request more permissions or personal data, potentially funneling them into scams or fraud.
Malwarebytes advises treating “Allow notifications” prompts as traps, staying wary of sensational cards, and keeping software up to date, with a security app able to block malicious pages before they load.