‘Matrix Push’ C2 Tool Hijacks Browser Notifications

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Matrix Push C2 Framework Exploits Browser Notifications for Cyberattacks Cybercriminals are utilizing a new command-and-control platform known as Matrix Push C2 to execute phishing and malware attacks via web browsers. This framework leverages browser push notifications, tricking users into clicking on malicious links disguised as legitimate alerts. BlackFog researchers reported on November 20, 2025, detailing how this method allows attackers to monitor infected devices and exploit user data. 8 sources 25