Google Bolsters Chrome with New Defenses Against ClickFix Scams and Unencrypted Sites

Google announced a series of updates to its Chrome browser aimed at curbing a wave of click‑fix scams and the lingering use of unencrypted HTTP connections.

The changes introduce real‑time site warnings that alert users when a page attempts to manipulate clicks or redirect them to malicious destinations. In addition, Chrome now leverages server‑side Gemini analysis to evaluate the safety of a site before it is displayed, providing an extra layer of protection against social‑engineering tactics.

Click‑fix attacks, a form of malvertising, involve compromised web pages that silently alter the destination of a user’s click, often steering traffic to phishing or ad‑fraud sites. By detecting these manipulations early, Chrome aims to reduce the success rate of such scams, which have risen in prevalence as attackers exploit the trust users place in familiar browsers.

The move also addresses the continued exposure of users to sites that serve content over plain HTTP. While HTTPS adoption has grown, many websites still rely on unencrypted connections, leaving data vulnerable to interception. Chrome’s new warnings flag insecure connections, nudging users and site operators toward encrypted alternatives.

SecurityWeek, which first reported the updates, noted that the Gemini analysis runs on Google’s servers rather than on the client device, allowing for more thorough inspection without impacting browser performance. This server‑side approach can spot malicious code patterns and unsafe configurations that might otherwise slip past client‑side checks.

Industry analysts view the enhancements as part of Google’s broader effort to make the web safer, building on previous initiatives such as Safe Browsing and the rollout of HTTPS‑by‑default policies. The company has not disclosed a timeline for further upgrades, but the current patch set is expected to roll out to stable Chrome builds within the next few weeks, reaching the majority of users worldwide.