Netflix and PayPal users have been warned to stay alert, as Matrix Push hackers are targeting them via compromised browser notifications.
It has been a week of ‘not what they seem’ hack attacks. First there was the news of how cybercriminals are testing out a new Android banking trojan calledthat reads secure instant message conversations by bypassing encryption and copying them when displayed on the smartphone screen.
Then, a warning to businesses to avoid falling victim to stealthyusing the clipboard as an attack vector. And now, dear reader, it’s the turn of the Matrix. No, not that Matrix, but Matrix Push. This cybercrime platform is using compromised and highly disguised web browser notifications to fool Netflix, PayPal and users of other high-profile services toIf there are three cybersecurity-related things I can say with some certainty as we start the fast descent into the new year, then they are as follows:Cybercriminals will continue to develop new and effective attack platforms. I mention this as all three are neatly wrapped up in a new threat warning report that has been issued by BlackFog security, and confirms a new command-and-control platform,Leveraging push browser notifications, faked system alerts, and lick-me link redirects, Matrix Push “turns web browsers into an attack delivery vehicle,” BlackFog’s Brenda Robb said. The phishing threat is there from the start, using social engineering to get potential victims to agree to accept browser notifications on a website that may be entirely malicious, or entirely legitimate but unknowingly compromised. Doing so sets off a chain of events that can have disastrous consequences. Browser app web push notifications are exploited by sending carefully crafted alerts that appear to be from the operating system or browser and pretend to be on behalf of the likes of Netflix and PayPal. “We found templates for brands such as MetaMask, Netflix, Cloudflare, PayPal, TikTok, and more,” Robb confirmed, “each designed to look like a legitimate notification or security page from those providers.” The cunning ploy here is that these notifications appear where you would expect them to, in the genuine notification area of the device, which makes it much more likely the user will accept them as real and respond by clicking through to whatever credential-grabbing resource they will end up at.
Tiktok Cloudflare Matrix Push Blackfog Chrome Browser Compromise Phishing The Matrix
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Netflix's Train Dreams: From Acclaimed Novella To Oscars Hopeful MovieJoel Edgerton's Robert looking concerned while holding a puppy in Train Dreams
Read more »
Netflix, Comcast and Paramount make bids for Warner Bros.Netflix Inc., Comcast Corp. and Paramount Skydance Corp. all submitted bids for Warner Bros. Discovery Inc., according to people with knowledge of the matter, setting the stage for one of Hollywood…
Read more »
SCAM ALERT: Valley senior loses thousands of dollars to sophisticated PayPal scam85-year-old Valley woman falls victim to PayPal scam after fraudsters used her real transaction data to appear legitimate, highlighting evolving fraud tactics.
Read more »
Cal’s Metayer helps lead Washington Spirit into NWSL championship game at PayPal ParkThe former Cal player wasn’t drafted, but has helped return the Washington Spirit to the NWSL championship game against Gotham FC on Saturday in San Jose.
Read more »
Cal’s Metayer helps lead Washington Spirit into NWSL championship game at PayPal ParkThe former Cal player wasn’t drafted, but has helped return the Washington Spirit to the NWSL championship game against Gotham FC on Saturday in San Jose.
Read more »
Netflix And PayPal Users Warned As Matrix Hackers AttackNetflix and PayPal users have been warned to stay alert, as Matrix Push hackers are targeting them via compromised browser notifications.
Read more »