● Covered by 4 sources · 4 reportsMedium impact3 neutral1 positive
Chrome's Safe Browsing Enhanced Protection Mode Improves Phishing and Scam Detection
Key points
- Enhanced Protection mode is 10x safer than Standard Protection.
- New warnings for suspicious and dangerous sites added to the address bar.
- Gemini models are used for cloud-based scam detection.
- Clipboard analysis detects and warns against ClickFix social engineering attacks.
- Enhanced Protection mode was introduced in 2020.
- Over 1 billion Chrome users had Enhanced Protection turned on last year.
- The 10x safer metric is based on the average number of safety warnings users receive.
- Chrome's Safe Browsing site warnings now have two levels, similar to file downloads.
- Gemini-powered scam detection moved from on-device to server-side.
- The new suspicious site warnings allow for a higher volume of protective warnings.
Enhanced Protection Updates
Google Chrome announced new features for its Safe Browsing Enhanced Protection mode. The company states that this mode now offers users a tenfold increase in safety against phishing, social engineering, notification abuse, and other scams compared to the Standard Protection mode.
New Site Warning System
Chrome is introducing new warnings in the address bar for sites exhibiting deceptive patterns. There are two tiers: 'Suspicious sites' trigger a shield icon in the Omnibox with options to 'Mark as safe' or 'Back to safety', indicating a lower confidence verdict but possible risk. 'Dangerous sites' continue to display a full-page red interstitial warning, signifying a high confidence verdict and high risk of user harm.
Gemini Model Integration for Scam Detection
Chrome is boosting scam detection by integrating Gemini models in the cloud, expanding beyond previous on-device approaches. This protects Enhanced Protection users from a wider array of threats, including fake antivirus and browser update scams. The model evaluates page content for indicators like brand representation, page intent, and scam likeliness, combining this with domain reputation and other security signals. Google processes this page content ephemerally, ensuring it is not logged, retained, or used for model training.
Protection Against ClickFix Attacks
The latest update also addresses ClickFix social engineering, where users are tricked into copying and executing malicious commands on their computers to 'fix' fake issues. These commands can lead to malicious actions like downloading malware. Since these utilities are native and trusted by security software, attackers use them to bypass existing Chrome and Safe Browsing download protections by shifting the download process out of the browser.
Clipboard Analysis for ClickFix
When a potential ClickFix script is copied, Chrome will remove personally identifiable information from the clipboard and send the script to Safe Browsing for analysis. If a dangerous verdict is returned, the browser displays a warning. This system is designed for high precision to protect users in real time while minimizing disruption to legitimate developer activities.
Updates
- Enhanced Protection mode was introduced in 2020.
- Over 1 billion Chrome users had Enhanced Protection turned on last year.
- The 10x safer metric is based on the average number of safety warnings users receive.
- Chrome's Safe Browsing site warnings now have two levels, similar to file downloads.
- Gemini-powered scam detection moved from on-device to server-side.
- The new suspicious site warnings allow for a higher volume of protective warnings.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
Google Chrome is updating its Safe Browsing Enhanced Protection with Gemini-powered server-side scam detection and warnings for suspicious commands copied from ClickFix attacks. These changes aim to improve user safety against phishing, social engineering, and other deceptive online tactics.
Google has implemented new security features in Chrome, including enhanced site warnings, server-side Gemini analysis for scam detection, and protection against ClickFix attacks. These updates aim to improve user safety against various social engineering tactics and malicious websites, particularly for users with Enhanced Protection enabled.
Google Chrome now provides warnings for suspicious websites, distinguishing them from dangerous sites, and offers enhanced protection against fake antivirus updates and ClickFix social engineering attacks. These updates aim to improve user safety by identifying deceptive patterns and leveraging AI to assess scam likelihood.
Google Chrome updated its Safe Browsing Enhanced Protection mode with new features to detect suspicious and dangerous sites, and to counter ClickFix social engineering attacks. These updates aim to make users ten times safer from various online threats compared to Standard Protection by leveraging Gemini models and clipboard analysis.