Control Displaying of Web Push Notifications Inducing Users to Phishing Websites

The number of phishing websites is increasing, and the methods used to direct users to these sites are becoming more diverse. As web push notifications become more widespread, adversaries have begun using them as a method to direct users to phishing websites, known as phishing web push notifications. While protection against other phishing methods has been widely studied, countermeasures against phishing web push notifications remain an ongoing research topic. In this paper, we explore a method to control the display of web push notifications to protect users from phishing attempts. To minimize the cost of implementing and introducing the control mechanism, we utilized a browser extension to manage the display of web push notifications. We employed a keyword-based approach to detect and prevent the display of suspicious web push notifications. Our experimental results demonstrated that the proposed method effectively blocks phishing notifications.