Chrome adds Gemini-powered scam detection and ClickFix warnings
Summary
Google says Chrome’s Enhanced Protection will use server-side Gemini to detect scams, show warnings for suspicious sites, and flag commands copied from ClickFix attacks.
Key points
- Chrome is moving scam detection for Enhanced Protection users from an on-device Gemini model to a more powerful server-side model.
- The model assesses page signals such as represented brand, intent, and likelihood of being a scam; Safe Browsing combines this with domain reputation and other signals.
- Google says page text is analyzed only when high-confidence scam indicators appear, and submitted content is processed ephemerally rather than logged, retained, or used to train models.
- Chrome will show a new warning for suspicious sites that display deceptive patterns but do not meet the threshold for its existing full-page warning.
- Chrome can detect suspicious commands copied from ClickFix scams; it removes personally identifiable information from the clipboard payload before sending it to Safe Browsing for analysis.
Article Details
- Event Type
- Google Chrome security feature update
- Impact
- Enhanced Protection in Safe Browsing adds server-side Gemini analysis for suspected scam sites, a warning for suspicious sites, and detection of suspicious commands copied from ClickFix scams. Google says the protections are intended to reduce exposure to phishing, social engineering, notification abuse, and other scams; the article reports no specific incident or measured real-world impact.
MITRE ATT&CK
Vendors
Products
GeminiGoogle Chrome adds Gemini-powered scam detection, warns users of ClickFix attacksGoogle ChromeGoogle Chrome adds Gemini-powered scam detection, warns users of ClickFix attacksSafe BrowsingThe changes are part of Enhanced Protection in Safe Browsing, which Google claims makes users ten times safer from phishing, social engineering, notification abuse, and other scams compared with Standard Protection.