[derivagral]

Not GP, but my interpretation: app sent a general push notification which, when tapped, opened a malicious URL in Chrome as the next step of this "funnel".