- Published
- Source
- Bitdefender
- Filed under
- Phishing & scams, AI attacks
Google is strengthening Chrome's scam defenses with Gemini-powered website analysis, new security warnings and protection against malicious commands.
Spotted a scam?
- Forward suspicious emails to report@phishing.gov.uk – the NCSC uses the reports to take scam sites down.
- Forward scam texts to 7726, free on most UK networks.
- Never share a one-time code, and check any request for money by calling a number you already trust.
Defender’s notebook
The attacker technique behind this story, in MITRE’s terms – and what to check in your own estate.
User Execution
ExecutionWhat a defender checks
- Block programs running from user-writable folders with application control or ASR rules.
- Warn staff about fake CAPTCHA and "paste this command" tricks.
- Hunt for PowerShell or mshta started from the Run dialog.
Build the skillBlue Team Analyst · Endpoint Monitoring
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK and ATT&CK are registered trademarks of The MITRE Corporation.
MyCyberWay training
Blue Team Analyst · Email & Phishing Investigation
Someone will report this email. Know exactly what to do next.
Analyse a reported phishing email properly: headers, message trace and quarantine, what SPF, DKIM and DMARC failures tell you, and the indicators that make it business email compromise.
- Header forensics and message trace
- SPF, DKIM and DMARC failures explained
- Spotting business email compromise
Headlines and short summaries only, except where a public body publishes under an open licence. Every story links to its publisher, who owns it. MyCyberWay does not edit or endorse third-party reporting.
