'Matrix Push' C2 Tool Hijacks Browser Notifications

Matrix Push is a subscription-based C2 framework that leverages standard browser Push and Service Worker APIs to deliver convincing phishing notifications and landing pages across major browsers and OSes; it ships with branded templates (PayPal, MetaMask, Cloudflare, TikTok, Netflix), collects victim metadata (IP, location, browser/OS, crypto wallet info), and offers real-time tracking so attackers can time follow-ups—its underground commercial availability and platform-agnostic design make it a scalable tool for credential theft, payment fraud, and crypto scams.