Matrix Push C2 Framework Exploits Browser Notifications for Cyberattacks

Cybercriminals are utilizing a new command-and-control platform known as Matrix Push C2 to execute phishing and malware attacks via web browsers. This framework leverages browser push notifications, tricking users into clicking on malicious links disguised as legitimate alerts. BlackFog researchers reported on November 20, 2025, detailing how this method allows attackers to monitor infected devices and exploit user data.