Microsoft Edge Adds Automatic Blocking of Malicious Browser Notifications Used in Scareware Scams
Microsoft has enhanced Microsoft Edge (version 156, released in October 2026) to automatically disable website notification permissions linked to detected scam activity, as detailed in a November 2 announcement by Rob Franco and Lu Huang. The feature connects detections from Microsoft Defender SmartScreen and Scareware blocker to the originating notification sender, preventing attackers from reusing granted notification permissions to repeatedly lure victims to fraudulent scareware pages. This addresses a known abuse pattern where users are tricked into allowing notifications (e.g., fake 'prove you're not a robot' prompts), which attackers then exploit to deliver fake antivirus alerts and security warnings driving users to scam pages.
Detalhes técnicos
When a scam is detected via SmartScreen or Scareware blocker and linked to a notification sender, Edge automatically revokes that site's notification permission. On next browser startup, an information bar informs the user of the action, and blocked sites can be reviewed and restored in Edge Settings if flagged incorrectly. Edge also adds a 'Block and report' option in the notification permission menu, allowing users to submit the requesting URL and a screenshot to aid SmartScreen's scam intelligence gathering. Microsoft states Scareware blocker protects tens of thousands of users daily, with SmartScreen intelligence extending protection to millions more.
Remediação
Users should keep Edge updated to version 156 or later to benefit from this automatic protection. Individuals can also manually disable unwanted notifications via the three-dot menu and use the 'Block and report' feature to help improve scam detection.
Linha do tempo
-
Microsoft Edge Adds Automatic Blocking of Malicious Browser Notifications Used in Scareware Scams
ler a análise desta fonte ocultar
Microsoft has enhanced Microsoft Edge (version 156, released in October 2026) to automatically disable website notification permissions linked to detected scam activity, as detailed in a November 2 announcement by Rob Franco and Lu Huang. The feature connects detections from Microsoft Defender SmartScreen and Scareware blocker to the originating notification sender, preventing attackers from reusing granted notification permissions to repeatedly lure victims to fraudulent scareware pages. This addresses a known abuse pattern where users are tricked into allowing notifications (e.g., fake 'prove you're not a robot' prompts), which attackers then exploit to deliver fake antivirus alerts and security warnings driving users to scam pages.
Technical Details
When a scam is detected via SmartScreen or Scareware blocker and linked to a notification sender, Edge automatically revokes that site's notification permission. On next browser startup, an information bar informs the user of the action, and blocked sites can be reviewed and restored in Edge Settings if flagged incorrectly. Edge also adds a 'Block and report' option in the notification permission menu, allowing users to submit the requesting URL and a screenshot to aid SmartScreen's scam intelligence gathering. Microsoft states Scareware blocker protects tens of thousands of users daily, with SmartScreen intelligence extending protection to millions more.
Remediation
Users should keep Edge updated to version 156 or later to benefit from this automatic protection. Individuals can also manually disable unwanted notifications via the three-dot menu and use the 'Block and report' feature to help improve scam detection.