Google has announced new security features for Chrome designed to detect scam websites and warn users about suspicious copied commands associated with ClickFix attacks. The update combines browser security controls with Gemini-powered analysis to identify potentially deceptive behaviour during routine web browsing.

For European businesses, the development is relevant because many cyber incidents still begin with social engineering rather than software exploitation alone. Browser-level protections will not replace internal security controls, but they may help reduce risk for employees who use web applications, SaaS tools, admin dashboards and online banking in their daily work.

What happened

According to Google, Chrome is adding new scam protections that use Gemini to detect deceptive websites. The company is also introducing warnings when users copy suspicious commands tied to ClickFix attacks.

ClickFix is a social-engineering technique that tries to persuade a user to copy and run commands on their own device, often under the false impression that they are fixing a problem, verifying access or enabling content. In practice, this can bypass normal caution because the user is tricked into carrying out the attacker’s instructions directly.

Based on the announced changes, Chrome’s new warnings are intended to intervene at the point where a user copies potentially dangerous commands from a malicious page. Google has presented this as an additional safeguard against a growing attack pattern rather than a complete replacement for endpoint protection or security awareness training.

Why it matters for European businesses

European companies of all sizes rely heavily on browsers as the front end for business operations. Finance tools, CRM systems, e-commerce platforms, cloud storage, analytics dashboards, support systems and internal admin panels are all commonly accessed through Chrome or Chromium-based browsers. That makes browser security a practical issue for business continuity and data protection.

The announced protections matter for several reasons:

• Phishing and scam sites remain a common entry point for credential theft, payment fraud and account compromise.
• ClickFix-style attacks target human behaviour rather than only technical vulnerabilities, which makes them harder to stop with patching alone.
• Browser-based warnings can help at scale because they reach employees during normal activity, including remote and hybrid work.
• AI-assisted detection may improve responsiveness to new scam patterns, although businesses should treat this as an additional layer rather than a guaranteed defence.

For organisations handling customer data, payments or sensitive commercial information, fewer successful scams can also reduce downstream exposure to account abuse, data incidents and service disruption.

Who may be affected

The update is most relevant to businesses that depend on web-based workflows and have large numbers of non-technical users interacting with online systems every day.

• SMEs that do not have large in-house security teams and rely on standard browser protections.
• E-commerce companies whose teams regularly access payment, logistics, advertising and marketplace dashboards.
• Marketing and sales teams that use many third-party platforms and are exposed to frequent login prompts, shared links and campaign tools.
• IT and operations teams responsible for endpoint security, browser policies and user awareness.
• Regulated businesses that need to reduce avoidable security risk around customer and operational data.

Businesses using managed Chrome deployments may also want to assess whether these protections can be supported or reinforced through enterprise browser settings and broader endpoint controls.

What companies should consider

European businesses should view the new Chrome protections as one useful defensive layer, not a standalone solution. Practical steps may include:

• Review browser management policies to ensure security features are enabled and browsers are updated promptly across company devices.
• Brief staff on ClickFix tactics, especially the warning signs of sites asking them to copy and run commands, scripts or terminal instructions.
• Reinforce least-privilege access so a successful social-engineering attempt has a smaller operational impact.
• Monitor phishing and account compromise risks across email, collaboration tools and browser activity rather than treating them as separate issues.
• Check incident response procedures for cases where an employee may have executed copied commands from a malicious source.
• Use layered controls such as endpoint protection, MFA, DNS or web filtering and security awareness training alongside browser protections.

Because the reported changes come from Google’s product announcement, businesses should verify rollout details, platform scope and enterprise management options in Chrome’s official documentation before updating internal security policies. Still, the direction is clear: browser vendors are responding more directly to modern scam and social-engineering techniques, and that is likely to matter for everyday business security across Europe.