Microsoft Edge now automatically disables website notifications when Microsoft Defender SmartScreen or the Scareware blocker detects a scam through those notifications This article explores notifications microsoft defender. . The change targets persistent notification abuse, where malicious websites repeatedly deliver fabricated antivirus warnings and deceptive security alerts after users grant permission.
The attack begins when a malicious page persuades visitors to select “Allow” on a browser notification request, sometimes disguising that action as human verification.
Microsoft Edge Blocks Malicious Browser Notifications Microsoft detected a pattern of abuse where phishing lures, update prompts, and malicious links are distributed via web push notifications. Similar notification permission revocation mechanisms in Chrome target abusive websites and coordinated notification networks, but Microsoft's disclosed trigger connects SmartScreen or Scareware blocker detections to notification sources. Microsoft claims Scareware blocker directly secures tens of thousands of users daily, while associated intelligence supports SmartScreen protections for millions more.
(Source: Microsoft) Microsoft states that this evidence can help SmartScreen identify potential scam destinations before the first abusive notification is delivered, extending intervention from detected phishing sites back to the initial permission acquisition stage. Notification abuse requires users to grant permission for browser messages, whereas ClickFix commands prompt victims to paste and run commands through Windows interfaces. Join 16,000+ SOC teams using ANY.RUN to enhance threat investigations and decrease manual workload.
