Chrome will now warn people who copy a suspicious command, a trick used to infect computers. It only works if Enhanced Protection is on.
Google is adding a new warning to Chrome that catches a scam called ClickFix. The scam tricks you into pasting a harmful command into your own computer. Google announced the rollout on Tuesday, October 21, 2026. The protection works only for people who have Chrome's Enhanced Protection setting turned on.
ClickFix often starts on a legitimate website that has been compromised, or on a malicious ad. You land on a fake page that looks like a Cloudflare or Google reCAPTCHA check, or shows an error that does not really exist. The page tells you to copy a command and paste it into the Windows Run box or the Mac Terminal app.
Once you press Enter, a chain of steps begins that can install malware. The material names two kinds: information stealers, which grab your data, and remote access trojans, which let a criminal control your computer. The commands often use built-in Windows tools such as PowerShell or cmd.exe, so they blend in with normal activity.
Google says attackers dodge Chrome's usual download protections because nothing is downloaded through the browser. The command does the work instead. Now, when an Enhanced Protection user copies a suspicious command, Chrome removes any personal information from the copied text and sends it to Safe Browsing, Google's system for spotting dangerous sites and files. If it judges the command dangerous, Chrome shows a warning before you can run it.
Google is also adding other scam defenses for Enhanced Protection users. One model looks at a page's brand, its intent and a scam likeliness score. Google says Chrome analyzes page text only when a site shows high-confidence scam signs, and that any content sent off the device is not logged, kept or used to train models.
Anyone who uses Chrome could be targeted by this kind of scam. That includes staff at small businesses, clinics, home-care agencies and nonprofits. One person following a fake instruction can put a whole workplace at risk. The new warning helps only where Enhanced Protection is on. People who already use that setting get the protection without doing anything more.
The alert box above lists the steps. The short version: switch on Enhanced Protection, keep Chrome updated, and make sure staff know that no real website needs them to paste a command into their computer.
The material does not say how quickly the warnings will reach every user. It also does not say how often the warning will catch a real attack. A warning is a safety net, not a guarantee, so the habit matters most. If a page asks you to copy and run something to prove you are human or fix an error, close it and report it.
Turn on Enhanced Protection in Chrome, and never paste a command because a website or pop-up told you to.
Scammers are emailing Humboldt County well permit applicants and demanding $5,960 before a permit is issued. The county says the fee is fake.
Read more: Fake County Emails Demand $5,960 Fee for Well PermitsCallers posing as the Sheriff's Office told a Sarasota County woman she missed jury duty. She lost over $40,000, and the same scam is hitting others.
Read more: Fake jury duty calls cost one Florida woman over $40,000Europol warns that scam callers can fake the number on your screen, so the safest move is to hang up and call back using a number you found yourself.
Read more: Got a suspicious call? Hang up and look up the number yourself
