Can a malware message be crafted that creates push/toast notification?

[NewsBot]

I believe push notifications are not tracked. This evening I received a toast popup from what appears to be a malware author who has gleaned what appears to be a decade-old password and username. The message body was something like "This is the hacker who

discovered your pwd" with strange characters intermingled in the message. Of course, I am bothered a bit but not amazed that a very old password is floating around the internet, but I am surprised and concerned that the toast notification was able to be sent

directly to my windows account. It seems only trusted applications and the O/S itself can do so, and checking which ones were open, I noticed only Outlook 2016, which can and does send toast notifications. However, I didn't find any corresponding emails with

this purported sender (something like "Tild1 K0nrad" ) in recent emails.

 

 

Any ideas what may have caused it?

 

 

Thanks in advance,

 

Alex

 

 

 

More...