Cybercriminals are delivering malware via web browser features using a newly discovered command-and-control (C2) platform dubbed Matrix Push C2. The malicious C2 platform, discovered by BlackFrog, tricks users with fake system notifications, redirecting them to malicious sites, monitoring infected clients in real time, and even scanning for cryptocurrency wallets. In a report published on November 20, BlackFrog outlined how Matrix Push C2 abuses the legitimate web browser push notification system as a C2 channel. Matrix Push C2 works by first tricking users into allowing browser notifications, often via social engineering on malicious or compromised websites. Once a user is subscribed to the attacker’s notifications a direct line to that user’s desktop or mobile device is created via the…