although push notifications within the browser are a typical shipping and delivery process, the attack generally starts having a fraudulent e-mail. people get a phishing e-mail from what appears like a genuine antivirus https://community.articulate.com/discussions/articulate-storyline/does-coinbase-have-24-7-customer-service-chat-service-coinbase-tm-community-help