'Pushpaganda is, at the highest level, a case of social engineering': Experts warn scammers are flooding Google Discover with AI-generated content
spreading malicious notifications
Date:
Tue, 21 Apr 2026 21:30:00 +0000
Description:
Pushpaganda uses AI-generated content and deceptive tactics to trick users into enabling notifications that deliver scams and evade traditional security defenses.
FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Tech Radar Pro Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Become a Member in Seconds Unlock instant access to exclusive member features. Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over. You are
now subscribed Your newsletter sign-up was successful Join the club Get full access to premium articles, exclusive features and a growing list of member rewards. Explore An account already exists for this email address, please log in. Subscribe to our newsletter Pushpaganda campaign weaponizes AI content to scale global notification scams Google Discover is being abused to deliver deceptive scam content Users are tricked into enabling notifications that deliver continuous threats A large-scale ad fraud and scareware campaign dubbed Pushpaganda has exploited Google 's Discovery feed to push malicious notifications to Android and Chrome users worldwide.
According to HUMAN's Satori Threat Intelligence Team , "Pushpaganda is, at
the highest level, a case of social engineering." The operation uses AI-generated articles and images to lure users into clicking deceptive news stories that appear in their personalized content streams. Article continues below You may like This new cybercrime platform lets hackers run malicious Google Ads and hide from Google's screening process Watch out - this devious new Android malware clicks on hidden browser ads to put you at risk 'Social advertising is being used to defraud at scale across some of the largest platforms.': Nearly one in three Meta ads reportedly point to a scam,
phishing or malware How the scam works Once a user lands on an actor-controlled domain, the site manipulates the user into enabling push notifications that later deliver various threats.
The threat actors created a collection of 113 domains and used AI tools to generate sensationalist headlines and misleading images designed to drive
high engagement.
Common lures include fake arrest warrants, police notices, false bank deposits, and unrealistic tech claims about $100 smartphones with 300MP cameras.
If a user agrees to allow notifications from these sites, the user begins seeing a series of intimidating alerts bearing no relationship to the domain from which they were enabled. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.
Some notifications mimic missed calls from family members, while others push urgent tax review notices or government direct deposit alerts.
Clicking a Pushpaganda-associated notification redirects the user to another actor-controlled domain.
These domains use deceptive buttons labeled "Apply Now," "Claim Now," or
"Join WhatsApp ." What to read next Google claims Gemini AI helped it block over 8.3 billion malicious ads in 2025 Generative AI has reduced fraud preparation time from 16 hours to under 5 minutes Your marketing stack is an attack surface is security watching?
However, these buttons use JavaScript to redirect users to additional
internal articles or different actor-controlled domains.
A JavaScript rotation algorithm also forces inactive browser tabs to automatically cycle through various actor-owned pages.
It then generates additional ad loads and makes the sites appear high-quality to ad networks.
At its peak, HUMAN observed roughly 240 million bid requests associated with Pushpaganda domains in a single seven-day period.
The ads in these scam domains contain some deepfakes referencing celebrities or medical professionals to exploit user trust at scale.
The operation initially targeted users in India but has since expanded to the United States, Australia, Canada, South Africa, and the United Kingdom.
A Google spokesperson stated that the company keeps the vast majority of spam out of Discover through spam-fighting systems and that a fix for the spam issue in question has been deployed.
A standard firewall or antivirus cannot block these browser-level push notifications, which makes user awareness a very effective defense.
Users should never enable push notifications from unfamiliar websites, regardless of how legitimate the article appears.
To block existing malicious notifications, users can access their browser settings and revoke notification permissions for any suspicious domain.
Mobile users should also review notification settings in their Chrome browser or Android system settings to remove unauthorized subscriptions. Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.
======================================================================
Link to news story:
https://www.techradar.com/pro/pushpaganda-is-at-the-highest-level-a-case-of-so cial-engineering-experts-warn-scammers-are-flooding-google-discover-with-ai-ge nerated-content-spreading-malicious-notifications
--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)