Google has introduced a new security feature in Chrome version 155 to combat ClickFix attacks. When the Enhanced Protection mode is active, the browser monitors the system clipboard for suspicious commands. If potentially malicious content is detected, the data is sent to Google servers for further analysis.
Before transmission, Google automatically strips personal information from the clipboard data. If the server identifies a threat, the browser displays an immediate warning to the user before the command can be executed in tools like PowerShell or cmd.exe. This process occurs in real-time.
ClickFix has become a significant security threat, accounting for 47% of initial corporate system breaches between January and December 2025, according to Informzashchita. The rise in such attacks is attributed to the shift toward remote work and the use of generative AI by attackers to create convincing social engineering scripts.
Chrome has also expanded its security capabilities by integrating more powerful Gemini large language models hosted in the cloud. This upgrade allows the browser to detect a broader range of fraudulent scenarios beyond just fake support scams. Additionally, Chrome now provides warnings for websites exhibiting signs of phishing or hidden malicious activity.
