Quiz websites are being used as bait to trick users into granting browser notification permissions. When visitors click 'Start the quiz,' they're shown a misleading prompt that actually grants the site permission to send push notifications indefinitely. These notifications are then used for ads, scams, affiliate schemes, or unwanted downloads. The campaign was traced to multiple domains including triviabox[.]co[.]in and unsphiperidion[.]co.in. A list of 18 IOC domains is provided, along with step-by-step instructions for disabling unwanted push notifications in Chrome, Firefox, Opera, Edge, and Safari on Mac.
Table of contents
How to remove and block web push notificationsAre these notifications useful at all?Indicators of Compromise (IOCs)Sort: