Microsoft Edge Enhances Protection Against Fake Virus Alerts

Microsoft has introduced an upgraded feature in its Edge browser aimed at automatically blocking notifications from websites that lead users to scam pages, effectively minimizing fake virus alert notifications. This enhancement is designed to protect users from deceptive practices that lure them into believing they have security issues.

Integration with Microsoft Defender SmartScreen

The new feature connects the capabilities of Microsoft Defender SmartScreen with Scareware blocker detections, focusing on notification permissions to prevent malicious sites from repeatedly engaging users. Officially announced on November 2, this change is part of Edge version 156. Unlike previous iterations that only warned users about dangerous sites, the updated Edge now halts notifications from the culprit website, ensuring users are not drawn back into scams they once allowed.

Research conducted by Rob Franco and Lu Huang, shared on Windows Blogs, highlighted this notification abuse. These scams are not new malware types but rather methods that exploit browser notifications to repeatedly bring victims back to fraudulent pages.

How the Scam Works

The typical scam begins with a request for notification access. Fraudulent websites trick users into granting permission by using deceptive prompts, such as proving they are not robots. Once access is permitted, these sites can continuously send fake security alerts, even after users have closed the initial page.

These alerts mimic legitimate antivirus warnings to create urgency, often convincing users to take unsafe actions. Reports on counterfeit Microsoft security scans demonstrate how these fake alerts can lead to poor decision-making by users.

Blocking and Reporting Malicious Notifications

Edge’s response involves a specific detection process where, upon identifying a scam through notifications, the browser automatically blocks further notifications from the original site. This approach not only prevents users from revisiting fraudulent pages but also emphasizes the significance of notification blocking tied to detected scams.

For users, an information bar explains the blocking action upon the next browser launch. If they believe it was an error, users can review and restore notifications through Edge Settings. To enhance user security, Edge additionally provides a “Block and report” feature within notification permissions, allowing users to report suspicious sites before granting them access.

Implications for Future Security

Stopping repeated contact is crucial in the broader scam landscape. Malicious campaigns often use techniques like the CypherLoc kit to push fake support calls. Microsoft’s Scareware blocker reportedly protects thousands daily, with user reports extending SmartScreen’s protection to more users. By connecting browser-side detection with user reports, Edge aims to transform individual observations into widespread protection.

This comprehensive security strategy highlights Microsoft’s commitment to safeguarding users from persistent online threats, offering a more secure browsing experience. Users are encouraged to utilize the new features and report suspicious activity to enhance collective cybersecurity.