New Criminal Toolkit Abuses Browser Push Notifications

BlackFog researchers describe "Matrix Push C2", a fileless criminal platform that abuses browser web push notifications to push fake system alerts, redirect users to malicious sites, and social-engineer victims into installing malware or revealing credentials; the technique is cross-platform and can be used to monitor clients and scan for cryptocurrency wallets.