Windows Notifications

This report documents a tech‑support scam campaign that targets visitors of pirated streaming websites: users are prompted to allow browser notifications, later receive malicious notifications that open full‑screen pages (with disabled controls and alarming audio) directing them to call fraudulent support numbers. The campaign is hosted on cloud providers (Amazon CloudFront, DigitalOcean), shows identifiable URL patterns and geographic targeting (Australia, Canada, Japan, United States), and has measurable daily hits.