Chrome Enhanced Protection uses Gemini to catch update and antivirus scams
Original title: Google Upgrades Chrome With Gemini AI to Detect Fake Antivirus and Browser Update Scams
Scam scoring moved to a server-side model for every Enhanced Protection user, with separate suspicious-site warnings and ClickFix command checks.
Google said on October 20, 2026, that Chrome’s Enhanced Protection mode now uses a server-side Gemini model to score pages that impersonate antivirus or browser-update prompts. Safe Browsing combines that score with domain reputation; Gemini does not block sites by itself. Enhanced Protection users also get lower-confidence suspicious-site warnings, while known-bad sites still get the full red warning. Chrome can warn when a page copies commands typical of ClickFix, after stripping personal data, and Google says page text sent for scoring is not logged or used for training.
- The earlier on-device Gemini check was limited to supported hardware.
- Page text is sent only when a site already shows strong scam indicators.
- ClickFix warnings cover commands run in PowerShell or cmd.exe outside download checks.
- Google says Chrome will never ask users to paste webpage commands to repair the browser.
- Users must turn on Enhanced Protection to get the new checks.
- 1.Enable Chrome Enhanced Protection to receive the Gemini scam checks and ClickFix warnings.
- ATT&CK
- T1059.001 PowerShell
From the original article
2 min read at cybersecuritynews.com
Google has upgraded Chrome’s Enhanced Protection mode with a more powerful Gemini AI model to detect fake antivirus alerts, browser update scams, and other deceptive websites. Announced on October 20, 2026, the changes also introduce suspicious site warnings and protection against ClickFix attacks that trick users into running malicious commands. The update expands Google’s earlier […]
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.