A DNS misconfiguration allowed us to become an “observer on the side” of a malicious push notification operation. Here’s what we learned.