Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Malware & Threats

Google Boosts Chrome Protections Against Malicious Files

Google has announced improved protections for Chrome users when downloading files from the internet.

Chrome security

Google on Wednesday announced it has improved protections against malicious files that Chrome users download from the internet.

Since last year, Chrome users have been receiving more context when the browser protects them from potentially malicious files, courtesy of two types of warnings that leverage AI-powered malware verdicts from Safe Browsing to explain if a blocked file is suspicious or downright dangerous.

The warnings feature different iconography, color, and text, making it easier for users to make informed decisions, and have resulted in “fewer warnings bypassed, warnings heeded more quickly, and all in all, better protection from malicious downloads”, Google says.

Users in the Enhanced Protection mode of Safe Browsing in Chrome were prompted to send suspicious files for deep scanning before opening them, but the internet giant has now moved to automatic deep scans instead of prompting the users each time.

“We’ve found these additional scans to have been extraordinarily successful – they help catch brand new malware that Safe Browsing has not seen before and dangerous files hosted on brand new sites. In fact, files sent for deep scanning are over 50x more likely to be flagged as malware than downloads in the aggregate,” Google explains.

Additionally, the internet giant is tackling malware distributed via password-protected encrypted archives with two mechanisms for the different Safe Browsing protection modes Chrome users have selected.

Advertisement. Scroll to continue reading.

Given that the passwords for those encrypted archives are typically available on the page where the file was downloaded from or in the file’s name, Enhanced Protection users are now prompted to send the archive and the password to Safe Browsing.

“Uploaded files and file passwords are deleted a short time after they’re scanned, and all collected data is only used by Safe Browsing to provide better download protections,” Google says.

For Standard Protection mode users, a prompt requesting the archive’s password will be displayed, but the file remains on the device and only the metadata of its contents is checked against Safe Browsing and the file is flagged if previously analyzed and categorized as malware.

Related: Chrome’s Standard Safe Browsing Now Has Real-Time URL Protection

Related: Browsing in Incognito Mode Doesn’t Protect You as Much as You Might Think

Related: Chrome 127 Patches 24 Vulnerabilities

Related: Chrome to Fight Cookie Theft With Device Bound Session Credentials

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Tal Kapulnik has been named CMO at Terra Security.

Cloudflare has appointed Christian Smith as President of Revenue.

Doran Stienike has become CIO at Presidio.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.