Matrix Push C2 abuses browser notifications to deliver phishing and malware

Cybercriminals are exploiting browser push notifications to deliver malware and phishing attacks through a new command-and-control platform called Matrix Push C2. This platform allows attackers to send deceptive notifications that can mimic legitimate alerts from trusted applications, tricking users into granting permission for notifications. Once permission is granted, attackers can push fake messages, monitor user interactions, and utilize URL shortening services to obscure malicious links.

The ultimate goal is often data theft or financial gain. Users are advised to manage their notification permissions across various browsers to mitigate these risks.