Chrome warns on ClickFix clipboard commands and plain HTTP
Original title: Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections
Server-side Gemini scam checks and ClickFix clipboard warnings are Enhanced Protection features; HTTP prompts are now default for everyone.
Google expanded Chrome Safe Browsing with a lower-confidence “suspicious site” warning and moved Gemini scam detection to its servers for every Enhanced Protection user. The server-side model covers fake antivirus and fake browser-update pages as well as tech-support scams. Chrome can also warn Enhanced Protection users if a copied ClickFix command is judged dangerous, after scrubbing the clipboard payload of personal data. Separately, Chrome now asks before the first connection to an unencrypted HTTP site, a prompt already on for Enhanced Protection and now default for all users.
Unconfirmed: Google’s claim that Enhanced Protection makes users “ten times safer” is based on warning counts, not independently verified outcomes.
- Google says more than 1 billion Chrome users enabled Enhanced Protection.
- ClickFix warnings send a PII-scrubbed clipboard payload to Safe Browsing.
- HTTP approval lasts until the site is unvisited for at least two weeks.
- Nearly 95% of desktop users see no HTTP warnings in a week.
- Single-label hostnames and local IP addresses do not trigger HTTP warnings.
- 1.Use Chrome Enhanced Protection for Gemini scam checks and ClickFix clipboard warnings.
From the original article
3 min read at securityweek.com
Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis. The post Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.