info@thehackernews.com (The@The Hacker News
//
Google is enhancing its defenses against online scams by integrating AI-powered systems across Chrome, Search, and Android platforms. The company announced it will leverage Gemini Nano, its on-device large language model (LLM), to bolster Safe Browsing capabilities within Chrome 137 on desktop computers. This on-device approach offers real-time analysis of potentially dangerous websites, enabling Google to safeguard users from emerging scams that may not yet be included in traditional blocklists or threat databases. Google emphasizes that this proactive measure is crucial, especially considering the fleeting lifespan of many malicious sites, often lasting less than 10 minutes.
The integration of Gemini Nano in Chrome allows for the detection of tech support scams, which commonly appear as misleading pop-ups designed to trick users into believing their computers are infected with a virus. These scams often involve displaying a phone number that directs users to fraudulent tech support services. The Gemini Nano model analyzes the behavior of web pages, including suspicious browser processes, to identify potential scams in real-time. The security signals are then sent to Google’s Safe Browsing online service for a final assessment, determining whether to issue a warning to the user about the possible threat.
Google is also expanding its AI-driven scam detection to identify other fraudulent schemes, such as those related to package tracking and unpaid tolls. These features are slated to arrive on Chrome for Android later this year. Additionally, Google revealed that its AI-powered scam detection systems have become significantly more effective, ensnaring 20 times more deceptive pages and blocking them from search results. This has led to a substantial reduction in scams impersonating airline customer service providers (over 80%) and those mimicking official resources like visas and government services (over 70%) in 2024.
Recommended read:
References :
- The Hacker News: Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android
- BleepingComputer: Google is implementing a new Chrome security feature that uses the built-in 'Gemini Nano' large-language model (LLM) to detect and block tech support scams while browsing the web.
- Davey Winder: Mobile malicious, misleading, spammy or scammy — Google fights back against Android attacks with new AI-powered notification protection.
- www.zdnet.com: How Google's AI combats new scam tactics - and how you can stay one step ahead
- The Hacker News: Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android
- www.eweek.com: Google’s Scam-Fighting Efforts Just Got Accelerated, Thanks to AI
- www.techradar.com: Tired of scams? Google is enlisting AI to protect you in Chrome, Google Search, and on Android.
- www.tomsguide.com: Google is keeping you safe from scams across search and your smartphone
- bsky.app: Google is implementing a new Chrome security feature that uses the built-in 'Gemini Nano' large-language model (LLM) to detect and block tech support scams while browsing the web.
- PCMag UK security: Google's Chrome Browser Taps On-Device AI to Catch Tech Support Scams
- thecyberexpress.com: Google is betting on AI
- The Tech Portal: Google to deploy Gemini Nano AI for real-time scam protection in Chrome
- Malwarebytes: Google announced it will equip Chrome with an AI driven method to detect and block Tech Support Scam websites
- cyberinsider.com: Google plans to introduce a new security feature in Chrome 137 that uses on-device AI to detect tech support scams in real time.
- The DefendOps Diaries: Google Chrome's AI-Powered Defense Against Tech Support Scams
- gbhackers.com: Google Chrome Uses Advanced AI to Combat Sophisticated Online Scams
- security.googleblog.com: Using AI to stop tech support scams in Chrome
- cyberpress.org: Chrome 137 Adds Gemini Nano AI to Combat Tech Support Scams
- thecyberexpress.com: Google Expands On-Device AI to Counter Evolving Online Scams
- CyberInsider: Details on Google Chrome for Android deploying on-device AI to tackle tech support scams.
- iHLS: discusses Chrome adding on-device AI to detect scams in real time.
- www.ghacks.net: Google integrates local Gemini AI into Chrome browser for scam protection.
- gHacks Technology News: Scam Protection: Google integrates local Gemini AI into Chrome browser
- www.scworld.com: Google to deploy AI-powered scam detection in Chrome
info@thehackernews.com (The@The Hacker News
//
Google is integrating its Gemini Nano AI model into the Chrome browser to provide real-time scam protection for users. This enhancement focuses on identifying and blocking malicious websites and activities as they occur, addressing the challenge posed by scam sites that often exist for only a short period. The integration of Gemini Nano into Chrome's Enhanced Protection mode, available since 2020, allows for the analysis of website content to detect subtle signs of scams, such as misleading pop-ups or deceptive tactics.
When a user visits a potentially dangerous page, Chrome uses Gemini Nano to evaluate security signals and determine the intent of the site. This information is then sent to Safe Browsing for a final assessment. If the page is deemed likely to be a scam, Chrome will display a warning to the user, providing options to unsubscribe from notifications or view the blocked content while also allowing users to override the warning if they believe it's unnecessary. This system is designed to adapt to evolving scam tactics, offering a proactive defense against both known and newly emerging threats.
The AI-powered scam detection system has already demonstrated its effectiveness, reportedly catching 20 times more scam-related pages than previous methods. Google also plans to extend this feature to Chrome on Android devices later this year, further expanding protection to mobile users. This initiative follows criticism regarding Gmail phishing scams that mimic law enforcement, highlighting Google's commitment to improving online security across its platforms and safeguarding users from fraudulent activities.
Recommended read:
References :
- Search Engine Journal: How Google Protects Searchers From Scams: Updates Announced
- www.zdnet.com: How Google's AI combats new scam tactics - and how you can stay one step ahead
- cyberinsider.com: Google Chrome Deploys On-Device AI to Tackle Tech Support Scams
- The Hacker News: Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android
- The Hacker News: Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android
- Davey Winder: Google Confirms Android Attack Warnings — Powered By AI
- securityonline.info: Chrome 137 Uses On-Device Gemini Nano AI to Combat Tech Support Scams
- BleepingComputer: Google is implementing a new Chrome security feature that uses the built-in 'Gemini Nano' large-language model (LLM) to detect and block tech support scams while browsing the web. [...]
- The Official Google Blog: How we’re using AI to combat the latest scams
- The Tech Portal: Google to deploy Gemini Nano AI for real-time scam protection in Chrome
- www.tomsguide.com: Google is keeping you safe from scams across search and your smartphone
- www.eweek.com: Google’s Scam-Fighting Efforts Just Got Accelerated, Thanks to AI
- the-decoder.com: Google deploys AI in Chrome to detect and block online scams.
- www.techradar.com: Tired of scams? Google is enlisting AI to protect you in Chrome, Google Search, and on Android.
- Daily CyberSecurity: Chrome 137 Uses On-Device Gemini Nano AI to Combat Tech Support Scams
- PCMag UK security: Google's Chrome Browser Taps On-Device AI to Catch Tech Support Scams
- Analytics India Magazine: Google Chrome to Use AI to Stop Tech Support Scams
- eWEEK: Google’s Scam-Fighting Efforts Just Got Accelerated, Thanks to AI
- bsky.app: Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android
- The Hacker News: Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android
- The DefendOps Diaries: Google Chrome's AI-Powered Defense Against Tech Support Scams
- gHacks Technology News: Scam Protection: Google integrates local Gemini AI into Chrome browser
- Malwarebytes: Google Chrome will use AI to block tech support scam websites
- security.googleblog.com: Using AI to stop tech support scams in Chrome
- iHLS: Chrome Adds On-Device AI to Detect Scams in Real Time
- bsky.app: Google will use on-device LLMs to detect potential tech support scams and alert Chrome users to possible dangers
- bsky.app: Google's #AI tools that protect against scammers: https://techcrunch.com/2025/05/08/google-rolls-out-ai-tools-to-protect-chrome-users-against-scams/ #ArtificialIntelligence
- www.searchenginejournal.com: How Google Protects Searchers From Scams: Updates Announced
Bill Mann@CyberInsider
//
Google has released its April 2025 Android security update, addressing a total of 62 vulnerabilities. This includes fixes for two actively exploited zero-day vulnerabilities. The security bulletin addresses vulnerabilities across system components, the Linux kernel, and third-party hardware drivers, highlighting the importance of applying updates promptly. The two high-severity zero-days were reportedly used in targeted surveillance operations.
The exploited vulnerabilities are identified as CVE-2024-53150 and CVE-2024-53197. CVE-2024-53150 is an Android Kernel information disclosure vulnerability caused by an out-of-bound read weakness, potentially allowing local attackers to access sensitive information. CVE-2024-53197 is a high-severity privilege escalation flaw in the Linux kernel’s USB-audio driver for ALSA devices.
The privilege escalation flaw, CVE-2024-53197, was reportedly exploited by Serbian authorities to unlock confiscated Android devices. This was part of a zero-day exploit chain developed by Cellebrite, an Israeli digital forensics company. The exploit chain also included CVE-2024-53104, patched in February 2025, and CVE-2024-50302, patched last month. With this latest update, all three vulnerabilities in that chain are now fixed. Users are advised to apply the updates as soon as they are released by Android original equipment manufacturers (OEMs).
Recommended read:
References :
- CyberInsider: Google Patches Actively Exploited Android Zero-Day Vulnerabilities
- discuss.privacyguides.net: Google just fixed two critical Android zero-days and 60 other flaws
- The Hacker News: Google Releases Android Update to Patch Two Actively Exploited Vulnerabilities
- BleepingComputer: Google fixes Android zero-days exploited in attacks, 60 other flaws
- securityaffairs.com: Google addressed 62 vulnerabilities with the release of Android ‘s April 2025 security update, including two actively exploited zero-days.
- cyberinsider.com: Google’s April 2025 Android Security Bulletin addresses 60 vulnerabilities across system components, the Linux kernel, and third-party hardware drivers, including two high-severity zero-days that have been actively exploited in targeted surveillance operations.
- Threats | CyberScoop: Google addresses 2 actively exploited vulnerabilities in security update
- techcrunch.com: Google fixes two Android zero-day bugs actively exploited by hackers
- Malwarebytes: Google fixes two actively exploited zero-day vulnerabilities in Android
- cyberscoop.com: Google addresses 2 actively exploited vulnerabilities in security update
- techcrunch.com: Google fixes two Android zero-day bugs actively exploited by hackers
- MSSP feed for Latest: Google Patches Two Zero-Days in April 2025 Android Security Update
- infosec.exchange: NEW: Google has pushed out patches for two zero-days that were being (and may still be) exploited in the wild. Amnesty previously found that one of them was being used against a student activist in Serbia, by Serbian authorities armed with Cellebrite.
- Cyber Security News: Google addressed 62 vulnerabilities with the release of Android ‘s April 2025 security update, including two actively exploited zero-days.
@The DefendOps Diaries
//
A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, raising significant cybersecurity concerns. This sophisticated malware, initially identified in 2016, has evolved to embed itself deeply into the Android system framework, making it difficult for users to detect or remove. Discovered on counterfeit versions of popular smartphone models sold at discounted prices through online stores, Triada poses a severe threat as it can steal user data immediately after device setup.
Triada's capabilities include stealing user data, such as social media and messenger accounts, and manipulating cryptocurrency transactions by replacing wallet addresses. The malware can also falsify caller IDs, monitor browser activity, and even activate premium SMS services. Experts warn that this new version infiltrates the device at the firmware level, indicating a compromised supply chain and urging users to exercise caution and purchase Android devices from reputable sources.
Recommended read:
References :
- bsky.app: A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, allowing threat actors to steal data as soon as they are set up.
- BleepingComputer: A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, allowing threat actors to steal data as soon as they are set up.
- The DefendOps Diaries: Explore the threat of Triada malware in counterfeit Android devices and learn how to protect against this sophisticated cyber threat.
- BleepingComputer: A new version of the Triada trojan has been discovered preinstalled on thousands of new Android devices, allowing threat actors to steal data as soon as they are set up.
- www.it-daily.net: Triada Trojan discovered on counterfeit Android smartphones
- PCMag UK security: Counterfeit Android Phones Preloaded With a Special Surprise: Malware
- Sam Bent: Triada Malware Preloaded on Counterfeit Androids Hijacks 2,600+ Devices for Crypto Theft and Espionage
- www.scworld.com: Updated Triada trojan compromises thousands of Android devices
- securityaffairs.com: New Triada Trojan comes preinstalled on Android devices
- The Hacker News: Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices
- Cyber Security News: Trinda Malware Infects Android Devices to Manipulate Phone Numbers During Calls
- Cyber Security News: New Triada Malware Attacking Android Devices to Replaces Phone Numbers During Calls
- www.techradar.com: Dodgy Android smartphones are being preloaded with Triada malware
|
|
FlagThis - #androidsecurity