Totalactualnewz.com Pushes Intrusive Ads

During a routine investigation of untrustworthy websites, our research team discovered the totalactualnewz.com rogue page. It operates by promoting browser notification spam and redirecting visitors to other (likely unreliable/malicious) sites. Most users access webpages like totalactualnewz.com via redirects caused by websites that use rogue advertising networks.

It must be mentioned that the content endorsed on and through rogue websites might differ depending on the visitor's IP address and geolocation.

At the time of research, totalactualnewz.com displayed a loading bar below which were instructions to – "Click the Allow button to subscribe to the push notifications and continue watching". The page attempted to trick visitors into enabling its browser notification delivery by falsely claiming that it is necessary in order to continue viewing online content.

Rogue sites use their notifications to deliver intrusive ad campaigns. The adverts endorse online scams, untrustworthy/harmful software, and even malware. Therefore, through pages like totalactualnewz.com – users can experience system infections, severe privacy issues, financial losses, and identity theft.

How Can Rogue Websites Abuse Push Notifications to Spam Ads?

Rogue websites can abuse push notifications to spam ads by exploiting the notification feature offered by modern web browsers. Here's an explanation of how they accomplish this:

• Deceptive prompt: Rogue websites employ deceptive tactics to trick users into allowing push notifications. They display misleading messages or pop-ups urging visitors to click on the "Allow" button, often claiming it is necessary to access content, continue watching a video, verify their age, or perform another action. Unsuspecting users may grant permission without fully understanding the consequences.
• Subscription request: Once the "Allow" button is clicked, the rogue website gains permission to send push notifications to the user's browser. This permission persists even after leaving the website. The website is now able to abuse this feature to deliver spammy ads directly to the user's desktop or mobile device.
• Intrusive ad campaigns: Rogue websites exploit the push notification feature to deliver intrusive advertising campaigns. They send frequent notifications containing advertisements, promotional offers, clickbait links, or even malicious content. These notifications can appear as pop-ups, banners, or alerts, interrupting the user's browsing experience and causing annoyance.
• Clickbait and scams: The notifications sent by rogue websites often promote clickbait content or online scams. They may lure users with enticing headlines, false promises of prizes, fake software updates, or misleading information. Clicking on these notifications can lead users to malicious websites, phishing pages, or other fraudulent schemes.
• Malware distribution: In some cases, rogue websites may exploit push notifications to distribute malware. The notifications can contain links that, when clicked, initiate the download of malicious files or trigger drive-by downloads. This can result in the installation of ransomware, spyware, or other types of malware onto the user's device.

To protect against spam ads through push notifications, it is essential to exercise caution when granting notification permissions to websites. Only allow notifications from trusted and reputable sources. Regularly review and manage notification settings in your browser's preferences to revoke permission for suspicious or unwanted websites. Additionally, keeping your browser and security software up to date helps safeguard against potential vulnerabilities that rogue websites may exploit.