Chrome will warn against misleading download buttons on websites

Google’s Chrome gets a new feature in its Safe Browsing protection, which will warn users if deceptive content is clicked. Sometimes this social engineering content, such as download buttons, is indistinguishable from the real thing.

Google has been expanding the Safe Browsing protection in its Chrome browser for some time now. The announcement is in line with Google’s long-standing policy against social engineering, which uses real-looking messages to trick users into downloading malicious content. In the blog post, Google shows some examples of ads it deems misleading.

Example of a misleading advertisement

Under the policy, content is considered social engineering if it is presented as part of the site or from another trusted party. Also content that wants to persuade users to take an action, which they would normally only perform for a trusted party, is not acceptable according to Google. It is often unclear to users that an ad is actually intended to spread malware, for example, or that it leads to a phishing site. In the case of fake download buttons, of which there are sometimes three on a page, the difference with the correct button is often barely noticeable.

Download button example

Users who click on such a button are then presented with a red warning screen. Google says the new measure will be one of many parts of the fight against insecure online content.