Google Chrome adds Gemini-powered scam detection and warnings
Google has rolled out new security updates for the Chrome browser, integrating Gemini-powered scam detection and specialized warnings to defend users against deceptive websites and ClickFix attacks.
Radwan AbdulhadiEditor and technology writer
Enhanced Protection Updates in Google Chrome
Google is bolstering its web browser security by integrating new scam protections into Google Chrome. These upgrades are designed to safeguard users against phishing, social engineering, notification abuse, and other online threats. According to Google, these features make users significantly safer when enabled compared to the standard browser configurations. Further details are available from BleepingComputer in the original source material.
The latest updates form part of the Enhanced Protection framework within Safe Browsing. Alongside traditional blocklists and heuristic measures, the browser is expanding its behavioral analysis to catch malicious pages before they can successfully trick unsuspecting visitors. Further details are available from Mayank Parmar in the original source material.
Introduction of Suspicious Site Warnings
As part of the security overhaul, Chrome is introducing a new 'suspicious site' warning. This specific alert is triggered when web pages display deceptive patterns that are commonly associated with known malicious sites, even if they have not yet reached the strict confidence level required for a full-page red warning.
By tailoring the warning user interface in this manner, the company noted that it can safely expand its coverage to display a higher volume of protective warnings to web users encountering borderline or newly minted scam pages.
Transition to Server-Side Gemini Detection
Previously, Chrome utilized an on-device Gemini model specifically to detect tech support scams. However, Google is now transitioning to a more powerful server-side model dedicated to users who have opted into Enhanced Protection.
The updated server-side model evaluates multiple signals from a webpage, including the brand being represented, the apparent intent of the page, and the overall likelihood that it is an operational scam. Safe Browsing then combines this sophisticated AI analysis with established domain reputation metrics and additional security indicators.
To address privacy concerns regarding server-side processing, Google emphasized that Chrome minimizes the volume of data shared with the server by only analyzing page text when a site exhibits high-confidence scam indicators. Furthermore, whenever page content is transmitted off the device, it is handled ephemerally—meaning it is never logged, retained, or utilized to train AI models.
New Defenses Against ClickFix Attacks
In addition to detecting general web scams, Enhanced Protection can now spot when a user copies a suspicious command stemming from a ClickFix scam. These types of attacks typically attempt to trick users into manually executing malicious PowerShell or Command Prompt instructions on their own operating systems.
When Chrome suspects that a clipboard payload involves a ClickFix script, the browser strips out personally identifiable information from the copied payload and sends it to Safe Browsing for security analysis. If the analysis flags the command as dangerous, Chrome instantly displays an explicit warning before the user has a chance to execute it.
Broader Security Context
The introduction of these AI-driven features arrives as security researchers track various evolving threats targeting web users, including recent incidents where hackers abuse Google Ads and Bing redirects to push Claude ClickFix attacks.
As online threats continue to grow in complexity, tech companies are increasingly turning to machine learning models like Gemini to stay ahead of bad actors who constantly adapt their deployment frameworks.
Sources
- BleepingComputerGoogle Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
Continue chronologically
Related entity coverage
Related stories
Google Chrome Introduces Suspicious Site Warnings
Google Chrome is launching a new two-stage browser safety feature designed to warn users about suspicious and dangerous websites before they visit them.
Google Starts Rolling Out Universal Cart Across Search and Chrome
Google is widely rolling out its new Universal Cart feature, bringing a prominent shopping cart icon to Search, Chrome, AI Mode, and the Gemini app.
Google Messages Adds Enhanced Protection Mode for Android
Google is introducing an enhanced protection mode in Google Messages and new Android security features for Cybersecurity Awareness Month.
Google Confirms Gemini AI Breached Three Real-World Firms
Google has confirmed that a Gemini model model autonomously breached the systems of three companies during a cybersecurity evaluation test.
