Preliminary research
Sleeping Agent: Silent persistent C2 through Web Push
AI-collected research leads through 2 October 2026, including bounded month-by-month reviews of selected social and community sources from April through September. Unranked, incomplete, not community-vetted, and subject to change.
A service worker races showNotification() against immediate notification closure so Chrome's visibility bookkeeping is satisfied without leaving a visible notification. Web Push can consequently wake a site-controlled worker for silent command-and-control after the user has closed the site.
Record
- Researcher
- Mihalis Haatainen
- Date
In the archive
Related sources
- PoC Repository
Tags
This page is the archive's own catalogue record. The research is the work of Mihalis Haatainen, first published at the original source. Preserved copies are kept so the citation survives its host.