Microsoft Edge Now Automatically Blocks Malicious Browser Notifications Used in Scareware Attacks

What happened

Microsoft Edge now automatically turns off website notifications linked to detected scams, cutting off a persistent delivery channel for fake antivirus warnings and deceptive security alerts. Introduced with Edge 156 in October, the protection links Microsoft Defender SmartScreen and Scareware blocker detections to the website sending the notification. Microsoft is a software and software development company based in Redmond.

The change addresses a recurring weakness in browser notification permissions: one misleading approval can let attackers repeatedly lure users back to fraudulent pages, even after the original website closes.

Microsoft identified the connection while reviewing reports submitted through Scareware blocker.

Microsoft detailed the capability in its November 2 technical announcement , authored by Rob Franco and Lu Huang. Microsoft Edge Blocks Malicious Notifications Attackers persuade visitors to enable notifications through deceptive instructions, including claims that clicking “Allow” proves they are not robots.

Once permission is granted, malicious websites can deliver alarming messages impersonating security warnings. Selecting those notifications sends users to scareware pages designed to manufacture urgency and fear.