GoKawiilChrome adds Gemini-based scam and ClickFix command detection
Google is rolling out new Chrome protections under Safe Browsing's Enhanced Protection mode that use a server-side Gemini model to flag deceptive websites and warn users about scam risk. The update also adds detection for ClickFix attacks, where users are tricked into pasting malicious commands into their terminal, and introduces a milder 'suspicious site' warning for pages that show scam-like patterns without meeting the threshold for a full red warning.
GoKawiil's interpretation of the reporting above, not reported fact.
Moving scam detection from on-device to server-side processing lets Google apply more computing power to spot sophisticated scams, though it also means some page content is briefly sent off-device, which Google says is not logged or used for training. The addition of a graded warning system suggests Google is trying to flag more borderline threats without overwhelming users with full-page alerts, which could reduce both missed scams and false alarms.
- Chrome's Enhanced Protection now uses a server-side Gemini model instead of on-device detection for scam analysis
- A new 'suspicious site' warning fills the gap between no warning and the existing full red warning page
- Chrome can now detect ClickFix scams by scanning clipboard content for malicious script patterns while stripping personal data
Source: bleepingcomputer.com, 2026-10-21
Published there as: “Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.