

Also note that many of the destination sites themselves prompt the user to Allow more notifications. Note that “Remove Ads” and similar notification buttons typically lead to the publishers chosen destination rather than anything that would help the user in disabling the popups. Clicking on the messages lead to various websites informing the user their subscription has expired, that McAfee has detected threats on their system, or providing direct links to purchase a McAfee subscription. In several other examples, social engineering is crafted around the McAfee name and logo. Clicking the message leads to an imposter Windows Defender alert website, complete with MP3 audio and a phone number to call. Some sites send notifications as often as every minute. Users willingly opt-in uncoerced.Īfter Allowing notifications, messages quickly start being received. In other cases, there is no deception involved. In many cases scammers use deception to trick users into Allowing push notifications to be delivered to their system. A significant portion is attributed to browser-based push notifications, and while there are a couple of simple steps users can take to prevent and remediate the situation, there is also some confusion about how these should be handled.

McAfee is tracking an increase in the use of deceptive popups that mislead some users into taking action, while annoying many others.
