Browser Notification Hacking

Overview

Malicious browser notifications, otherwise known as browser notification hacking is a common tactic that is simple, yet dangerous. When surfing the Internet you may encounter a pop up that asks the user if they wish to show notifications for the website. 

If the user accepts these notifications, the site can then begin pushing notifications to any tab open in the browser, as well as your computers system notifications. These notifications can mask themselves as serious issues like an anti virus expiring, a virus being detected, or a hardware failure within your computer. Please note, these notifications are misleading, and built to try and get you to click malicious links.  

Here is an example of these notifications: 

It is important to note that you should never click/follow these notifications as they often contain malicious links, or a virus. 

Steps For Prevention 

As a general rule of thumb, it is a good idea to not accept these notifications unless you are 100% sure of the legitimacy of the site your browsing.

Disabling Malicious Browser Notifications 

1. On your computer, open Chrome.
2. At the top right, click More > Settings.
3. Click Privacy and security > Site Settings > Notifications.
4. Select the option that you want as your default setting.
   • Block a site:
     1. Next to "Not allowed to send notifications," click Add.
     2. Enter the site's web address.
     3. Click Add.

Additional Information

If you find yourself a victim of Browser Notification Hacking, please use the following link to report the incident: 

Report a Security Incident