Be Very Sparing in Allowing Site Notifications
Summary: A Krebs on Security report describes how sites running scripts from PushWelcome, a Montenegro-based company ranked among the top 2,000 sites globally by Alexa.com, prompt visitors to approve browser notifications and then let advertising partners display any message at any time. Indelible LLC's analysis found those notifications push fake security alerts, software install prompts, dating ads and investment offers, and that the browser modifications are poorly detected by antivirus and endpoint security products.
What's compelling: PushWelcome holds the IP addresses, browser user agents and other telemetry of everyone who accepted notifications, which Indelible's Frank Angiolelli said could let it target individual organizations and users with fake system prompts - and on a Krebs test machine, alerts about five viruses appeared almost immediately, with clicks landing on Norton and McAfee purchase pages.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026