Skip to content
NewA calmer, faster ZeroHour
StoryToolsinfo

Chrome warns Enhanced Protection users of scams and ClickFix commands

2 sources · 2 articlesFirst reported Updated ()
What's new

First merged summary.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Chrome Enhanced Protection now scores scam pages with server-side Gemini and warns before users run copied ClickFix commands.

Google said on October 20, 2026, that Chrome Enhanced Protection now scores suspected scam pages with a server-side Gemini model that replaced a hardware-limited on-device check. Safe Browsing combines Gemini’s brand and intent score with domain reputation; the model does not block sites by itself. Page text is sent only after high-confidence scam signs, and Google says it is not logged, kept, or used for training. Known-bad sites still get a full red warning, while lower-confidence pages get a separate suspicious-site warning. Chrome also warns before users run a copied ClickFix command, usually PowerShell or cmd.exe, after stripping personal data and sending the payload to Safe Browsing. The Hacker News describes new on-device scam checks; the other outlets say the new scoring is server-side.

Key facts
  • The checks require Safe Browsing Enhanced Protection and were announced on October 20, 2026.
  • Google says more than 1 billion Chrome users have Enhanced Protection enabled.
  • Page text is sent only after strong scam indicators and is not retained or used for training.
  • ClickFix clipboard payloads are stripped of personal data before Safe Browsing analysis.
  • GBHackers says Google’s ten-times-safer claim compares warning counts, not compromises.
  • Full-page red warnings remain for known-bad sites; suspicious pages get a lighter warning.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 20, 2026Google announces Gemini scam scoring and ClickFix warnings · GBHackers

What each outlet adds

beyond the shared facts
  • The Hacker NewsFake Cloudflare and reCAPTCHA pages; US-Canada financial-ad checks.
  • GBHackersTen-times-safer figure compares warning counts, not compromises.
  • Cyber Security NewsEarlier on-device Gemini check was limited to supported hardware.
  • SecurityWeekMore than 1 billion users enabled Enhanced Protection.
Vendors
GoogleApple
Products
ChromeSafe BrowsingSafariWebKit
Organizations
American Bankers AssociationCanadian Bankers Association
Countries
United StatesCanada
AI models
Gemini

Coverage

oldest first · one row per article · UTC
  1. · 9d ago The Hacker NewsFirst report

    Chrome warns Enhanced Protection users before they run ClickFix commands

    Copied commands are scrubbed and checked by Safe Browsing, and Chrome is also expanding scam and financial-ad checks.

  2. · 9d ago GBHackers

    Chrome uses server-side Gemini to flag fake antivirus scams

    Enhanced Protection adds scam scoring, separate suspicious warnings, and clipboard checks for ClickFix commands.