Understand this story
On October 22, 2026, Chrome added Gemini-powered scam detection and added warnings for ClickFix attacks. According to a BleepingComputer report, the feature is located in Safe Browsing Enhanced Protection and can identify deceptive websites; when users copy suspicious commands from a ClickFix attack, the browser issues a warning. Chrome changed the Gemini model that originally ran on-device to a server-side model, analyzing page text only when a website shows high-confidence signs of a scam; page content is not recorded, retained, or used to train models. Chrome also added a "suspicious site" warning for pages that exhibit deceptive patterns but do not reach the threshold for a full-page red warning. On the same day, heise online reported that Chrome 155 enables "Always use secure connections" by default, and mentioned the new ClickFix attack protection and server-side Gemini scam identification under Enhanced Protection mode. There are currently no further developments.
AI-generated from public reports
Latest development · Report
Chrome 155: Google blocks insecure HTTP connections by defaultDevelopments
1 confirmed developments
Chrome adds Gemini-powered scam detection and ClickFix warnings
Source:BleepingComputer
Reports and discussion timeline
Browse reports and discussion by time. Their evidence levels remain distinct.
Oct 22
heise online
Chrome 155: Google blocks insecure HTTP connections by default
Chrome 155 turns "Always use secure connections" on by default; before establishing an insecure HTTP connection, the browser will first ask for the user's permission, and this applies to both desktop and Android. Previously, this feature was only available as an optional setting, or for users who had enabled Safe Browsing enhanced protection mode. Chrome has also added protection against ClickFix attacks, and in enhanced protection mode it uses a server-side Gemini model to strengthen scam detection.
BleepingComputer
Google Chrome adds Gemini-powered scam detection, can block ClickFix attacks
Google Chrome has added Gemini-powered scam detection to Safe Browsing Enhanced Protection, which can identify deceptive websites and warn users when they copy suspicious commands in a ClickFix attack. Chrome has changed the Gemini model that originally ran on-device to a server-side model, analyzing page text only when a website shows high-confidence signs of a scam; page content is not logged, retained, or used to train models. Chrome has also added a "suspicious site" warning for pages that exhibit deceptive patterns but do not reach the threshold for a full-page red warning.
Heat trend for this story
- Current
- 8
- Period peak
- 15 Oct 23 00:00
- 24-hour change
- —
Move the pointer or select the chart to inspect hourly heat. Use the left and right arrow keys with a keyboard.