Google suggested Improved malware detection in Chrome – you can now send password-protected executable files for remote scanning. And to do this, you will have to give Google the passwords for such files.
Image source: security.googleblog.com
When the “Enhanced protection” option is enabled in the Chrome settings, it warns the user when trying to download a file that may be unsafe due to suspicious characteristics or, even more so, because it is on the list of known malware. Now the browser will also offer users to send such files for remote scanning; if it is a protected ZIP, 7Z or RAR archive, then it will be possible to send the password for it.
Google noted that malware distributors are trying to bypass browser protection mechanisms by posting it in protected archives and placing passwords on download pages for these files. The company assured that after scanning, both the files themselves and the passwords for them are deleted. Something similar will be offered to those who have “Standard protection” selected in Chrome settings – they will also be asked for permission to scan the file and the password for it, but the scanning will be carried out locally and will be limited to checking the metadata of the archive contents.
Google Chrome will also feature a two-tier notification system when a user attempts to download a potentially dangerous file. The browser will warn about suspicious files, for which the verification mechanism has issued a “guilty” verdict with a low level of confidence and an unknown risk of harming the user; and about dangerous files, when the protection system has a high level of confidence that they can harm the user. Each level has its own icon, color, and text to help the user distinguish between the levels of risk.
If you notice an error, select it with your mouse and press CTRL+ENTER.
