Users of PayPal, Netflix, and TikTok have become the latest targets of phishing attacks from hackers who are testing a new tool called Matrix Push C2.

It is reported that the tool is available as a web panel, allowing attackers to send notifications, track each victim in real time, determine which notifications the victims interacted with, and create shortened links using the built-in URL shortening service.

In addition, thanks to Matrix Push C2, hackers track installed browser extensions, including cryptocurrency wallets.

The attack is based on social engineering, and Matrix Push C2 comes with customizable templates that greatly enhance trust in fraudulent messages. Attackers can easily tailor their phishing notifications and landing pages to well-known companies and services, said Blackfog security expert Brenda Robb.
When a scammer sends a phishing notification to a victim from a website through the web push notification mechanism built into the web browser. It allows sending alerts that look like they were sent by the operating system or the browser itself. Reliable brands, familiar logos, and convincing wording are used to maintain the deception.
Cybersecurity specialists discovered Matrix Push for the first time in early October. There are no earlier versions of this mechanism.