Hackers Abuse Google Discover With AI

Cybersecuritynews •Tushar Subhra Dutta • April 16, 2026

A newly identified threat operation is exploiting one of the most widely used content discovery tools on Android and Chrome devices — Google’s Discovery feed — to deliver malicious push notifications to unsuspecting users across multiple countries. The operation, named Pushpaganda by researchers, combines AI-generated content, aggressive social engineering, and deceptive browser behavior to manipulate real users […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Pushpaganda Operation Exploits Google Discover with AI-Generated Scams A new cyber operation named Pushpaganda is exploiting Google Discover to deliver malicious notifications to users globally. Attackers have created approximately 113 fake domains filled with AI-generated articles designed to manipulate users into allowing persistent browser notifications. This operation has been observed generating 240 million bid requests in a single week, affecting users in countries including India, the U.S., Australia, Canada, South Africa, and the U.K. The attack leverages sensationalist headlines to attract clicks, enabling the delivery of scareware, fake legal threats, and financial scams through notifications. Google has confirmed that it has deployed a fix after being alerted by HUMAN Security, but the operation had already reached significant scale before enforcement. The AI-generated content used in this scheme is difficult to distinguish from legitimate articles, complicating detection efforts. As a result, users are exposed to various scams, including impersonated calls and false alerts. 3 sources 68

Extracted Entities

Hackers Abuse Google Discover With AI

The full story

Extracted Entities

Campaigns (1)

Platforms (1)

Tools (1)