/
← Voltar ao feed
low

Google Chrome adds server-side Gemini scam detection and ClickFix clipboard warnings to Enhanced Protection

1 fonte(s) · 1 atualização(ões) · publicado 21/10/2026 19:16 · coletado há 2 horas

Google is extending Chrome Enhanced Protection in Safe Browsing with a server-side Gemini model that detects deceptive websites. It also adds warnings when users copy suspicious ClickFix commands. Google claims Enhanced Protection makes users ten times safer from phishing, social engineering, notification abuse and other scams than Standard Protection. Chrome also gains a softer "suspicious site" warning for pages that show deceptive patterns but fall below the confidence threshold for the full-page red warning.

Detalhes técnicos

  • Chrome previously used an on-device Gemini model to detect tech support scams. Enhanced Protection users now get a more powerful server-side model.
  • The model evaluates the brand a page represents, its intent and the likelihood of a scam. Safe Browsing combines this with domain reputation and other signals.
  • Google says page text is analyzed only when high-confidence scam indicators are present. Content sent off-device is processed ephemerally and is never logged, retained or used for model training.
  • For ClickFix, which tricks users into running malicious PowerShell or Command Prompt commands, Chrome strips personally identifiable information from the copied clipboard payload and sends it to Safe Browsing. If the verdict is dangerous, Chrome shows a warning before the user continues.

Remediação

  • Enable Enhanced Protection in Chrome Safe Browsing settings to receive these detections.

Linha do tempo

  1. bleepingcomputer.com ↗ · pub. 21/10/2026 19:16 · coletado 21/10 20:00 primeiro registro

    Google Chrome adds server-side Gemini scam detection and ClickFix clipboard warnings to Enhanced Protection

    ler a análise desta fonte

    Google is extending Chrome Enhanced Protection in Safe Browsing with a server-side Gemini model that detects deceptive websites. It also adds warnings when users copy suspicious ClickFix commands. Google claims Enhanced Protection makes users ten times safer from phishing, social engineering, notification abuse and other scams than Standard Protection. Chrome also gains a softer "suspicious site" warning for pages that show deceptive patterns but fall below the confidence threshold for the full-page red warning.

    Technical Details

    • Chrome previously used an on-device Gemini model to detect tech support scams. Enhanced Protection users now get a more powerful server-side model.
    • The model evaluates the brand a page represents, its intent and the likelihood of a scam. Safe Browsing combines this with domain reputation and other signals.
    • Google says page text is analyzed only when high-confidence scam indicators are present. Content sent off-device is processed ephemerally and is never logged, retained or used for model training.
    • For ClickFix, which tricks users into running malicious PowerShell or Command Prompt commands, Chrome strips personally identifiable information from the copied clipboard payload and sends it to Safe Browsing. If the verdict is dangerous, Chrome shows a warning before the user continues.

    Remediation

    • Enable Enhanced Protection in Chrome Safe Browsing settings to receive these detections.