Google has introduced new security features in Chrome to protect users from ClickFix attacks, a growing form of online scam that tricks people into running malicious commands on their computers. Announced on October 20, 2026, the updates strengthen Chrome’s Safe Browsing protections for users who have Enhanced Protection enabled. The new measures aim to identify suspicious activity and warn users before dangerous commands can cause harm.
ClickFix attacks usually begin when users visit a compromised website or a malicious advertisement that redirects them to a fake verification page. The page may imitate Cloudflare or Google reCAPTCHA and display a fake error, asking users to copy and paste a command to fix the issue. These instructions can appear legitimate, but following them may start a malware infection. Attackers use this trick to make victims carry out the attack themselves.
The commands used in these attacks often rely on legitimate Windows tools, such as PowerShell and Command Prompt, which attackers misuse to download and install malware. These tools are already available on computers and may appear trustworthy to security software. By moving the execution process outside the browser and into the operating system, attackers can bypass traditional browser download protections. The resulting infection may involve information-stealing malware or remote access trojans.
To address this problem, Chrome can now detect when users with Enhanced Protection enabled copy commands that may be linked to ClickFix attacks. The copied content is checked by Google’s Safe Browsing system, which first removes personally identifiable information before sending the clipboard data for analysis. If the system identifies the command as dangerous, Chrome displays a warning to alert the user. Google says the detection system is designed to provide strong protection while reducing interruptions to legitimate developer activity.
Google is also improving website scam detection through new warnings and an upgraded Gemini-based detection system. Chrome will distinguish between suspicious websites, which show patterns associated with possible scams, and dangerous websites that are known to pose a high risk. The browser is also expanding protection against fake antivirus software, browser update scams and technical support scams. Google says webpage text is analyzed only when strong indicators of a scam are detected, and information sent to its servers is processed temporarily rather than logged, retained or used to train its AI models.
These changes are part of Google’s broader effort to make online browsing safer as scammers develop new ways to deceive users. Google says Chrome’s Enhanced Protection offers stronger defenses against phishing, social engineering and other online threats than Standard Protection. Users can enable it through Chrome’s security settings to receive additional safeguards. However, users should still avoid copying commands from unfamiliar websites or running instructions simply because a page claims their computer needs urgent repairs. A browser warning can help, but careful online behaviour remains essential.
Stay alert, and keep your security measures updated!
Source: Follow cybersecurity88 on X and LinkedIn for the latest cybersecurity news
