Google Chrome Gemini yordamida firibgarlikni aniqlashni qo'shdi, foydalanuvchilarni ClickFix hujumlaridan ogohlantiradi
Muallif: Mayank Parmar
21-oktabr, 2026-yil
18:16
0
Chrome yangi firibgarlikdan himoya qilish funksiyalarini olmoqda, ular Gemini yordamida aldovchi veb-saytlarni aniqlaydi va foydalanuvchilar ClickFix hujumlaridan shubhali buyruqlarni nusxalaganida ularni ogohlantiradi.
Bu o'zgarishlar Safe Browsing'dagi Kengaytirilgan himoya (Enhanced Protection) qismidir, Google ta'kidlashicha, bu foydalanuvchilarni Standart himoyaga nisbatan fishing, ijtimoiy muhandislik, bildirishnomalarni suiiste'mol qilish va boshqa firibgarliklardan o'n barobar xavfsizroq qiladi.
Chrome shuningdek, aldovchi naqshlarni ko'rsatadigan, lekin mavjud to'liq sahifa qizil ogohlantirish uchun zarur ishonch darajasiga yetmagan sahifalar uchun yangi "shubhali sayt" ogohlantirishini qo'shmoqda.
"Shubhali sayt ogohlantirishlari sahifa ma'lum zararli saytlar bilan bog'liq aldovchi naqshlarni namoyish etganda foydalanuvchilarni xabardor qiladi," deb tushuntirdi kompaniya.
"Ogohlantirish UI-ni shu tarzda moslashtirish orqali biz himoya qamrovini xavfsiz ravishda kengaytirib, ko'proq himoya ogohlantirishlarini ko'rsatishimiz mumkin."
Gemini qurilma ichidan server tomoniga o'tmoqda
Chrome avval texnik yordam firibgarliklarini aniqlash uchun qurilma ichidagi Gemini modelidan foydalangan, ammo endi Kengaytirilgan himoya foydalanuvchilari uchun yanada kuchli server tomonidagi modelga o'tmoqda.
Google tushuntirishicha, model sahifadagi brend, uning maqsadi va firibgarlik ehtimoli kabi signallarni tahlil qiladi. Safe Browsing keyin ushbu tahlilni domen obro'si va boshqa xavfsizlik signallari bilan birlashtiradi.
"Chrome serverga yuboriladigan ma'lumotlar miqdorini minimallashtiradi, faqat sayt yuqori ishonchli firibgarlik ko'rsatkichlarini namoyish etganda sahifa matnini tahlil qiladi," deb ta'kidladi Google.
"Va sahifa mazmuni qurilmadan yuborilganda, u efemer tarzda qayta ishlanadi — ya'ni u hech qachon qayd etilmaydi, saqlanmaydi yoki modellarni o'qitish uchun ishlatilmaydi."
Chrome endi ClickFix buyruqlarini ushlay oladi
Kengaytirilgan himoya siz ClickFix firibgarligidan shubhali buyruqni nusxalaganingizda ham aniqlay oladi, bu odatda foydalanuvchilarni o'zlari zararli PowerShell yoki Command Prompt buyruqlarini bajarishga aldashadi.
Agar Chrome ClickFix skriptidan shubhalansa, u clipboard yuklamasidan shaxsiy identifikatsiya qilinadigan ma'lumotlarni olib tashlaydi va tahlil uchun Safe Browsing'ga yuboradi. Agar u xavfli deb qaytsa, Chrome siz davom etishdan oldin ogohlantirishni ko'rsatadi.
Hujumchilar haqiqiy ma'lumotlarga ega bo'lgach, ularning harakatlarining faqat 37% bloklanadi
Umumiy oldini olish ballari dastlabki kirishdan keyin nima sodir bo'lishini yashirishi mumkin. Hujumchilar haqiqiy ma'lumotlardan foydalanganda, oldini olish keskin pasayadi.
The Blue Report 2026 himoyalarni texnika bo'yicha o'lchaydi, 338 million simulyatsiya mijozlar ishlab chiqarish muhitlarida o'tkazilgan.
Hisobotni oling
Tegishli maqolalar:
Google Gemini tez orada Mac'dagi fayllar, ilovalar va vebga to'liq kirish huquqiga ega bo'lishi mumkin
Xakerlar keng ko'lamli ma'lumot o'g'irlash uchun AI ramkalarini qurmoqda
Xakerlar Claude ClickFix hujumlarini tarqatish uchun Google Ads, Bing yo'naltirishlaridan suiiste'mol qilmoqda
Xakerlar ccTLD registrlarini buzib, Google domenlarini egallab olmoqda
Google yangi Chrome zero-day xatosi hujumlarda ishlatilayotgani haqida ogohlantirmoqda
Google Chrome adds Gemini-powered scam detection, warns users of ClickFix attacks
By Mayank Parmar
October 21, 2026
06:16 PM
0
Chrome is getting new scam protections that use Gemini to detect deceptive websites and warn users when they copy suspicious commands from ClickFix attacks.
The changes are part of Enhanced Protection in Safe Browsing, which Google claims makes users ten times safer from phishing, social engineering, notification abuse, and other scams compared with Standard Protection.
Chrome is also adding a new "suspicious site" warning for pages that show deceptive patterns but haven't reached the confidence level required for its existing full-page red warning.
"Suspicious site warnings notify users when a page exhibits deceptive patterns commonly associated with known malicious sites," the company explained.
"By tailoring the warning UI in this way, we are able to safely expand our coverage to display a higher volume of protective warnings."
Gemini is moving from on-device to server-side scam detection
Chrome previously used an on-device Gemini model to detect tech support scams, but it's now moving to a more powerful server-side model for Enhanced Protection users.
As explained by Google, the model looks at signals such as the brand represented on a page, its intent, and how likely it is to be a scam. Safe Browsing then combines that analysis with domain reputation and other security signals.
"Chrome minimizes the amount of data shared with the server by only analyzing page text when a site exhibits high-confidence scam indicators," Google noted.
"And whenever page content is sent off the device, it is processed ephemerally – meaning it is never logged, retained or used to train models."
Chrome can now catch ClickFix commands
Enhanced Protection can also detect when you copy a suspicious command from a ClickFix scam, which typically tricks users into running malicious PowerShell or Command Prompt commands themselves.
If Chrome suspects a ClickFix script, it removes personally identifiable information from the clipboard payload and sends it to Safe Browsing for analysis. If it comes back as dangerous, Chrome displays a warning before you continue.
Once attackers have valid credentials, only 37% of their actions are blocked
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Get the report
Related Articles:
Google Gemini could soon get full access to your Mac’s files, apps and the web
Hackers build AI frameworks for widescale credential theft
Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
Hackers hijack Google domains after breaching ccTLD registries
Google warns of new Chrome zero-day bug exploited in attacks