marry 25.07.2024, 12:00 PM
Google Chrome will warn you from now on when you download risky password-protected files and show you warnings with more information about potentially malicious downloaded files.
These new, more detailed warnings should help users quickly find out what danger they are facing from any file downloaded from the Internet.
The AI-based warning system uses malware information from Google’s Safe Browsing service.
Users will now see alerts alerting them to suspicious files and dangerous files.
“These two warning levels have distinctive iconography, color and text to make it easier for users to quickly and confidently make the best choice for them based on the nature of the threat and the Safe Browsing security level,” says Google’s Chrome security team. “These improvements in clarity lead to significant changes in user behavior, including fewer bypassed alerts, faster alert consideration, and overall better protection against malicious file downloads.”
Chrome now also sends suspicious files to the company’s servers for more detailed scanning for users with Enhanced Protection mode enabled in Safe Browsing, providing additional protection.
When downloading password-protected archives (eg zip, .7z, or .rar), users with Enhanced Protection turned on are prompted to enter a password before submitting the file for additional scanning by Google’s Safe Browsing service.
Google says that files and passwords for files sent to its servers will be deleted immediately after scanning, and any data collected will only be used to increase download protection for all Chrome users.
Those using Chrome in standard protection mode will also be prompted to enter passwords for downloaded archives. However, both the file and the password remain on the device, and “only the metadata of the archive content is checked by Safe Browsing,” Google says. “Even in this mode, users are still protected as long as Safe Browsing has previously seen and categorized malware.”
However, despite these assurances coming from Google, many companies are unlikely to accept that their employees provide Chrome with passwords to password-protected archives containing confidential data, to prevent possible data leaks.
Source: www.informacija.rs