Overview
- Chrome’s Enhanced Protection now runs Gemini-powered scam analysis on Google servers for enrolled users, broadening detection beyond on-device checks.
- The browser will inspect copied terminal or command text, strip PII from the clipboard payload, and send the sanitized text to Safe Browsing for a danger score.
- New tailored UI warnings include a lower-confidence shield in the address bar for ‘suspicious’ sites and full-page red interstitials for sites deemed dangerous.
- The update specifically targets ClickFix scams that trick people into copying commands that use trusted system tools like PowerShell or cmd.exe to download malware.
- Google says the content is processed ephemerally and not logged or used to train models and highlights that Enhanced Protection users see far more protective warnings than Standard Protection users.